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HEARING 2 ON YEAR 2000 COMPUTER COM- 
PLIANCE IN THE DEPARTMENT OF VETER- 
ANS AFFAIRS 


THURSDAY, SEPTEMBER 26, 1997 

House of Representatives, 

Subcommittee on Oversight and Investigations, 

Committee on Veterans’ Affairs, 

Washington, DC. 

The subcommittee met, pursuant to notice, at 9:30 a.m., in room 
334, Cannon House Office Building, Hon. Terry Everett (chairman 
of the subcommittee) presiding. 

IVesent: Representatives Everett, Evans, and Mascara. 

Mr. Everett (presiding). The hearing wUl come to order. 

Good morning. This morning’s hearing is a follow-up to the hear- 
ing the Subcommittee on Oversight and Investigations had on Jime 
26, on the VA’s efforts to achieve year 2000 computer conmliance. 
Our last hearing emphasized the picture within Veterans Benefits 
Administration, VBA, and this hearing will emphasize the Veter- 
ans Health Administration, VI^ with an overview of the Depart- 
ment-wide activities. As some industry analyst predicted, the more 
the problem is examined, the bigger it appears to be. Cost esti- 
mates are rising remarkably and rapidly. 

I stated during the last hearing that time is running out. We 
Eigain have a reed-time computer display, this one new emd im- 
proved with audio, counting down to the year 2000, which occurs 
here on the Internet. There are 828 calendeu* days left, not a lot 
of time for the eunoimt of work that we have to do. 

Today, we will heeu* from the General Accounting Office which 
the subcommittee asked to look at — partic\darly at VHA. Also, of 
course, we hear again from the VA, and we’ll hear again from the 
Feder^ Drug Administration on Y2K impacts on health care deliv- 
er and patient safety issues related to non-compliance medical de- 
vices and equipment. 

I look forward to having the hearing. At the outset, let me also 
thank our full committee ranking member, who will take over the 
Chair of this hearing. I regret, unfortunately sometimes we serve 
on more than one committee and I have a bill that I have to intro- 
duce in another committee, and oiu* ranking member is not feeling 
well today and sends his apologies for not being here. 

I appreciate the witnesses turning up, and 111 look forward to re- 
viewing your testimony. At this time I would ask Lane Evans — as 
I said, our rsmking hill committee chairman, and who is no strang- 
er to this seat also — ^to take over. His interests and my interest 

( 1 ) 
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have parallel on this particnilar problem for a ntimber of years. So, 
Lane if you’ll take over, I’d appreciate it. 

OPENING STATEMENT OF HON. LANE EVANS, RANKING DEMO- 
CRATIC MEMBER, HOUSE COMMITTEE ON VETERANS’ 
AFFAIRS 

Mr. Evans. I am very pleased that Chairman Evans has sched- 
uled this all-important follow-up to this summer’s hearing on the 
VA’s efforts to achieve year 2000 compliance. In June, Idie GAO 
told us that the VA has a long way to go to solve this problem, but 
not much time to get there. Time obviously doesn’t stand still, at 
leeist not in this hfe, so we’ve got to do all we can on ihe committee 
to ensure that the VA is able to provide high-quahty, non-inter- 
rupted service to our veterans once the clock turns over to the next 
millennium. 

I am encouraged that the subcommittee continues to carefully 
monitor the VA’s progress on this issue. I am particularly pleased 
with the steps that the Veterans Benefits Administration has taken 
to bolster the management of its year 2000 compliance efforts, and 
I am hopeful that the Veterans Health Administration will make 
similar progress in the days and weeks to come. Still there is no 
doubt that the VA has a daunting management task ahead of itself 
if it is to meet the year 2000 goals. 

I believe I also speak for the chairman when I say that this sub- 
committee stemds ready to continue its aggressive oversight on this 
issue so that the VA be in the best possible position to ensure 
that it brings its mission-critical systems into year 2000 compli- 
ance. 

Again, I want to thank Chairman Everett for his continued lead- 
ership, and I look forward to today’s testimony. 

Mr. Everett. At this time I would like to have recognition for 
panel number one: Joel Willemssen, Director, Information Re- 
sources Man^ement, Accounting and Information Management Di- 
vision of the GAO, and ask him to introduce his colleagues. 

STATEMENT OF JOEL C. WILLEMSSEN, DIRECTOR, INFORMA- 
TION RESOURCES MANAGEMENT, ACCOUNTING AND INFOR- 
MATION DIVISION, GENERAL ACCOUNTING OFFICE; ACCOM- 
PANIED BY HELEN LEW, ASSISTANT DIRECTOR, INFORMA- 
TION RESOURCES MANAGEMENT, ACCOUNTING AND INFOR- 
MATION MANAGEMENT DIVISION, GENERAL ACCOUNTING 
OFFICE, AND LEONARD J. LATHAM, TECHNICAL ASSISTANT 
DIRECTOR, OFFICE OF THE CHIEF SCIENTIST, ACCOUNTING 
AND INFORMATION MANAGEMENT DIVISION, GENERAL AC- 
COUNTING OFFICE 

Mr. Willemssen. Thank you, Mr. Chairman. Accompanying me 
today is Helen Lew, Assistant Director, and L.J. Latham, Teclmical 
Assistant Director. 

Thank you for inviting us here today to testify on the progress 
being made by the Federal Government, and in particular VA, in 
addressing the year 2000 computing challenge. As requested, I will 
briefly summarize my statement. 

Regarding the Federal Government’s overall efforts to address 
the year 2000 issue, the progress of many of the major agencies 



3 


continues to be too slow. Seven^-five percent of the agencies’ total 
number of 8,500 mission-critical systems still need to be repaired 
or replaced, and the total cost estimate has now increased to $3.8 
billion up about $1 billion from the estimate of 3 months ago. 

Reports of several of the agencies are disapiwinting, and there- 
fore, 0MB is now placing more urgency on this issue and beginning 
to demand evidence of progress. 

Turnin g to the VA, it’s critical that the Department’s systems be 
made yeeur 2000 comphant to avoid disruption to benefits and serv- 
ices. Our past and current work at VA mdicates that the Depart- 
ment recognizes the urgency of its task, and it has made progress. 
But much remains to be done if it is to avoid wide-spread computer 
failures. If left uncorrected, the types of possible problems that 
could occtir include: late or inaccurate benefits’ payments, lack of 
patient scheduling for hospital treatments, and misinterpretation 
of patient data. 

As we testified in June, VBA has responded to the challenge by 
initiating a number of actions. However, several risks remain. 
These include: schedules for the renovations of key applications 
such as compensation and pension being compressed and other ren- 
ovations schedules being very tight. In addition, although VBA has 
completed an inventory of its internal and external data-interfaces, 
it still has not assessed the msgority of these for year 2000 comph- 
ance. If VBA is to avert serious disruption, it will need to address 
issues such as these. 

The year 2000 challenge for the health side of VA is enormous. 
VHA is in the initial stages of assessing the compliance of its mis- 
sion critical systems. It does not plan to complete assessment imtil 
January 1998, and renovations until July 1998. To effectively as- 
sess and renovate, it is necessary to imderstand how local faciUties 
are using National applications. If it is true that some local faciU- 
ties have customized these National appUcations, it’s important 
that VHA know where these appUcations have been changed so as 
to ensure that they also are year 2000 compUant. 

Physical faciUties are another area of concern. VHA has not yet 
completed an inventory of faciUties’ related systems and equipment 
such as: ventilating svstems, security systems, and disaster recov- 
ery systems. Such elements are vital to providing health care 
services. 

Biomedical devices could also be affected by the year 2000. The 
impact could range from incorrect formatting of a print-out to in- 
correct operation of the device, having a potential to affect patient 
care or safety. In attempting to precisely determine this impact, 
VHA has sent letters to manufacturers. Based on the responses re- 
ceived from its first letter, VHA recently sent more detailed letters 
asking more specific questions. These letters were sent to about 
1,600 manufac^ers on September 9, witii a request for a response 
by October 3. 

FDA, in its role of protecting tiie pubUc from unsafe or ineffective 
medical devices, also recently began communicating with manufac- 
turers. FDA sent a letter in early July of this year to about 13,000 
such manufacturers reminding them of their responsibiUty to en- 
sure that their products wiU not be affected by the century change. 
According to FDA, one response was received to this letter. 
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FDA official explained that it was not the agency’s intention to so- 
licit a specific response because FDA expects manufacturers to re- 
port any problems through normal reporting channels. 

That concludes a summary of my statement, and I’d be pleased 
to address any questions that you may have Ranking Member 
Evans or Congressman Mascara. Iliank you. 

[The mepared statement of Mr. Willemssen appears on p. 32.] 

Mr. Evans (presiding). Thank you very much. We appreciate 
your testimony. The Office of Management and Budget places the 
VA in the upper-half of Federal agencies as far as year 2000 com- 
pliance efforts are concerned. Would you agree with this assess- 
ment? 

Mr. Willemssen. I have a fairly good idea on the progress of the 
other agencies and I would say, especially in terms of its recogni- 
tion of the urgency of the issue, its commitment to make it a top 
priority, and ite devotion to put the necessaiy resources towards it, 
VA would definitely be in the upper half of the 24 mqjor depart- 
ments and agencies at this point m time. 

Mr. Evans. How realistic is the VA’s $162 million budget esti- 
mate for its year 2000 compliance efforts? 

Mr. Willemssen. At this point, it’s the best we have. Frankly, 
I would anticipate that you will see it gradual^ escalate over the 
next several months as the assessment of VllA is completed. It 
may not necessarily escalate, but that would be our best estimate 
at this point. 

Mr. Evans. As you indicated, we’ve seen a $1 billion increase in 
OMB’s estimate for Crovemment-wide Year 2000 operations in the 
last 3 months or so, up to $3.8 biUion. Is that something we can 
eiroect as well? 

Mr. Willemssen. Yes, sir. Until full assessments are done at all 
the major agencies you can still expect some gradual increases in 
all likeuhooa. 

Mr. Evans. I think almost everyone agrees with the view that 
the year 2000 comphance problem represents management rather 
than technical challenges to Federal agencies. Would you agree 
with such an eissessment, and if so, could you specify what addi- 
tional steps VA must take to adequately address these manage- 
ment issues? 


Mr. Willemssen. We would definitely agree that the challenge 
is more managerial than technical. Regarding VH^ it’s absolutely 
crucial to complete, from a management perspective, their assess- 
ment and renovation activities as soon as possible. As they begin 
collecting more information on the health side, including bio- 
medical devices, it is especially important that they disseminate 
that information as widely as possible so that every one knows 
exactly what they and others are finding in terms of the compli- 
ance of their systems and various medicm devices. I think there is 
also an open question for botii the VHA and, more importantly 
FDA, on the extent to which they may decide to independently as- 
sess manufacturer clsiims that various devices are indeed year 2000 


compliant. 

! Mr. Evans. The VA’s testimony in Jime suggested that this prob- 
lem was not nearly as severe at the Veterans Health Administra- 
tion as it is at the Veterans Benefits Administration. Your testi- 
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mony siiggests, however, that enormous challenges remain at VHA. 
Are you satisfied with the steps the VA has taken to address these 
problems? And how would you compare VHA’s efforts to those of 
V^A’s? 

Mr. WiLLEMSSEN. I’d say that VHA and VA recognize the enor- 
mous challenge they face, but frankly, looking at the statistics, 
VHA is obviously a little behind its counterpart on the benefits 
side. And, I think before we can say exactly what the magnitude 
of the problem is, VHA has to get through the assessment phase 
as quickly as possible. 

One 01 the concerns that we have, and we mention it in our 
statement, is the extent to which individual hospitals and other fa- 
cilities have customized National applications software. To the ex- 
tent that this has happened to a wide degree, it is going to be in- 
cumbent on VA to go out and check each of those facilities to make 
sure they are year 2000 compliant. But whether that is the case 
right now or not, I don’t think anyone fully knows until that as- 
sessment has been completed. 

Mr. Evans. The Veterans Health Administration has sent several 
letters to manufacturers of medical devices that may not be year 
2000 compliant. VHA also intends to rely on the Food and Drug 
Administration to seek similar feedback from manufacturers in 


order to better gauge the health and safety risks if certain devices 
are non-compUant. Is this all the VA can do at this point to address 
the medical device safety issue? And what would be additional 
steps you would recommend for the VA and the FDA in this 
remird? 

1^. WiLLEMSSEN. On the medical device area, I would s^ num- 
ber one: it is especially critical that whatever activities VHA has 
enraged in, that they widely disseminate the data that they are 
coUecting to all affected parties so that everyone knows what the 
manufacturers’ claims are. And then secondly, as I mentioned be- 


fore, I think VHA and FDA have to t hink about next steps after 
theVve received till the manufacturers’ claims about their products; 
is there going to be some kind of independent assessment of wheth- 
er those claims are in fact true. As you know, we have just recently 
begun our assessment at VHA, and that’s an issue that we plan to 
explore further. 

Mr. Evans. At this point I yield to the minority counsel. 

Mr. Kingston Smith. Thank you, Mr. Chairman. 

Mr. Willemssen, at this point, what does GAO believe are the top 
three issues that Veterans Benefits Administration must aggres- 
sively address regarding the year 2000 compliance problem? 

Mr. Willemssen. On the benefits side, the top three would prob- 
ably be: first, regarding the tight and compressed schedules for var- 
ious key applications, there must be urgent management attention 
to the progress in actuedly renovating those apphcations to make 
sure that the schedule is met. And to the extent that the schedule 


starts slipping more, VA management will have to look at other op- 
tions since we can not have a sUp in the schedule. 

Secondly, regarding data exchanges and interfaces, we think it is 
especially critical that they be assessed for compUance as quickly 
as possible. To VBA’s credit, they have identified about 590 inter- 
faces, but now the next important step is to assess wheHier those 
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interfaces are compliant; and to the extent that VA can’t get the 
cooperation from other external entities, it needs to raise those is- 
sues as quickly as possible. 

And third, we would say it’s fairly critical that VBA consider up- 
dating the risk assessment that it did earlier this year to take into 
account its revised strategy in its year 2000 program. 

Mr. Kingston Smith. Thank you, Mr. Chaiman. 

Mr. Evans. The gentleman from Pennsylvania. 

Mr. Mascara. Thank you very much, Mr. Evans. 

I have an opening statement I’d like to include in the record. 

Mr. Evans. Without objection, Frank, it will be entered in the 
record for this proceeding. 

[The prepared statement of Congressman Mascara appears on p. 
28.] 

Mr. Mascara. I had an opportunity to read over some of the 
statements last night; and is the problem with the VA unique some 
how, or does this franscend the VA across the entire government — 
the problem of 2000 compliance? 

Mr. WiLLEMSSEN. The problem transcends the Federal Govern- 
ment. 

Mr. Mascara. Do you think perhaps the President or the admin- 
istration or the Congress shoidd appoint some kind of czar who 
would be in charge of a coordinatea effort to solve the problem? I 
mean, as I see, and from what I read, you said that the budget, 
“The OflSce of Management and Budget has determined the VA is 
making much more progress than many other agencies.” So each 
agency is dealing with the 2000 problem? 

Mr. WiLLEMSSEN. That’s corrert. Congressman. 

Mr. Mascara. Do you beheve that perhaps some concerted effort 
by the administration or the Congress to appoint some czar to deal 
with this problem would be to our benefit and maybe we would 
solve the problem before we get to the year 2000? 

Mr. WiLLEMSSEN. We are on record in testimony in July stating 
that we thought OMB’s actions to date at that time had been insufr 
ficient and that more urgency needed to be placed on this issue 
than has been. Frankly, &ough, we’re encouraged by the most re- 
cent report of 0MB that they are taking this issue more seriously; 
that they are urging more corrective action; and that, in some cases 
for certain agencies who clearly haven’t made as much progress for 
their information technology acquisitions, 0MB will not necessarily 
fund those acquisitions xmless they are for year 2000 activities. So, 
I think the bar has been raised as we speak today, even compared 
to a couple of months ago. 

Mr. Mascara. How long have you been trying to solve this prob- 
lem; or someone recognized we had a problem and thought we 
should do something about it? What timeframe? 

Mr. WiLLEMSSEN. The broad recognition of this being a clear 
Government-wide and National problem; it’s probably best to say 
about Spring 1996 is when it really sta^d to begin to get atten- 
tion. However, at the same time, I would say that people who pro- 
gram for a living have known that this would eventually hit all 
along, but when they were programming many of these systems, 
15, 20, 25 years ago, they had no idea they would still be aroiuid 
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as we approach the year 2000, and that’s what in many cases has 
occurred. 

Mr. Mascara. The reason I ask that ^estion, I’m curious be- 
cause I was a county commissioner in Washin^n County and 
imder our administration we computerized the county and talked 
about the year 2000. But even before that, as an accountant who 
computerized his offices back in the late 1960s and 1970s, we knew 
there was a problem then. And I’m just wondering why 1996, it 
took somebody 

Mr. WiLLEMSSEN. I think that’s when it really started to get a 
lot of attention. Beyond, I’d say even a year ago, the individuals 
who are not familiar with computer technology thought that this 
was still some sort of a scam by the information technology commu- 
nity to acquire additional funds. There was a denial phase that 
many had to go through. I think we’re beyond that now. 

Mr. Mascara. How about cost? I read some figures, and I think 
the last time we had a hearing someone said that it was in excess 
of $300 bilhon worldwide in costs to solve this problem. Is there an 
estimate of what it’s going to cost this government to solve the 
problem? 

Mr. WiLLEMSSEN. The most recent estimate for the 24 major Fed- 
eral agencies is $3.8 bilhon. That estimate does not include the cost 
of fixing various State systems which also are fi*equently helped 
with Federal funds. It does not include, obviously, the costs of 
many of the private sector firms that are going to have to make 
these fixes in order to minimize the economic impact to the 
country. 

Mr. Mascara. It seems to me, this is a National emergency. If 
we can’t generate the checks for the GI bill, or health benefits, or 
VA pensions, and Social Security checks, and across the board, isn’t 
this some kind of National emergency problem that someone should 
step forward and say, “Hey, we have a national emergency here. 
If we don’t solve the OToblem there’s going to be chaos?” 

Mr. WiLLEMSSEN. We have been trying to sound that message. 
The year 2000 issue is one of GAO’s high-risk areas within uie 
Federal Government that we try to focus attention on and sound 
the alarm on. 

Mr. Mascara. WeU then I guess its true that we work best under 
crisis, so it’s not a crisis yet. We’ll wait until 1999 and get into No- 
vember and December and say, “We have a real serious problem,” 
and maybe we’ll solve it. 

I don’t mean to be cynical. Lane, but someone needs to tell me 
something — I’m not a computer ei^rt, I don’t understand it, at 
best I’d say let’s go back to 1900 and say that that means 2000 and 
just go forward, u it will accept 1900; I’m not sure if that’s the case 
or not. But someone needs to make a concerted effort, and I don’t 
think aU these agencies should be out there running around spend- 
ing money tnring to figure out how we’re going to solve it. If one 
person solved it, would it be across the board that aU agencies 
could use that technology to solve file problem? 

Mr. WiLLEMSSEN. No. The difficulty 

Mr. Mascara. It is unique in certain circumstances? 

Mr. WiLLEMSSEN. Yes, the computing environments are so het- 
erogeneous that there is no single solution. You’ve got to go into 
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each individual system and vou’re not dealing just with applica- 
tions, you’re also dealing witn operating systems, databases, tele- 
communications; so it is something you have to go in — and that’s 
why we said earlier, it’s not so muw a technical challenge, it’s a 
manarament challenge. It’s a lot of tedious work to go in and ana- 
lyze all that code. 

Mr. Mascara. Are we hiring outside firms to come in and assist 
the government in solving these problems? 

Mr. WiLLEMSSEN. Many of our agencies are hiring outside firms 
to help, and I think VA could also attest to that, that they are try- 
ing to get outside help also. 

Mr. Mascara. Thank you. 

Mr. Evans. Thank you; I appreciate your participation in the 
hearing today. 

We want to thank the GAO for their testimonv and excellent re- 
sponse to our questions. We may have some follow-up firom mem- 
bers that aren’t here, and well ask that you respond to those in 
writing and the questions and answers wUl be made part of the 
record of this proceeding. 

Mr. WiLLEMSSEN. Thank you. 

Mr. Evans. Thank you. At this time, we would like to welcome 
Mr. Mark Catlett, the VA’s Acting Assistant Secretary for Manage- 
ment, the Acting Chief Information Officer, and the Acting Cmef 
Finance Officer, and ask him to introduce b^ staff appearing with 
him today. 

STATEMENT OF D. MARK CATLETT, ACTING ASSISTANT SEC- 
RETARY FOR MANAGEMENT, ACTING CHIEF INFORMATION 

OFFICER, ACTING CHIEF FINANCIAL OFFICER, DEPART- 
MENT OF VETERAN AFFAIRS; ACCOMPANIED BY DAVID R. 

ALBINSON, CIO, VETERANS HEALTH ADMINISTRATION, DE- 
PARTMENT OF VETERAN AFFAIRS; AND NEWELL E. 

QUINTON, CIO, VETERANS BENEFITS ADMINISTRATION, DE- 
PARTMENT OF VETERAN AFFAIRS 

Mr. Catlett. Good morning, Mr. Chairman. 

Mr. Evans. Good morning. 

Mr. Catlett. Accompanying me today are Mr. Dave Albinson, 
the Chief Information Officer for the Veterans Health Administra- 
tion; and Mr. Newell Quinton, the Chief Information Officer for the 
Veterans Benefits Administration. 

Would you like me to go ahead with my fiill statement? 

Mr. Evans. Pletise, if you would at this time. 

Mr. Catlett. Mr. Chairman and members of the subcommittee, 
it is my pleasure to testify on behalf of the Department of Veteran 
Affairs on the status of our information systems for the year 2000. 
I am accompanied today by the gentlemen I just mentioned. We 
last met with you on Jime 26, and today we wish to give you an 
update on our progress. I have submitted my full statement to the 
subcommittee, which I ask to be made a part of the hearing record. 

I would like to take this opportunity to provide the subcommittee 
with an update on VHA’s, VBA’s, and the Austin Automation Cen- 
ter’s year 2000 accomplishments. 

For the Veterans Health Administration: VHA has prepared and 
widely distributed a detailed compliance plan, organized in accord- 
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ance with the GAO’s draft year 2000 best practices. We provided 
a copy of that plan to the subcommittee in June. In the plan, key 
responsibilities and accotmtabiliiy were assigned to the VHA CIO 
and associate CIOs; the Veterans Integrated Service Network 
CIOs, the 22 people there at the network; and VHA health care 
facility management. 

VHA’s goal is to complete its assessment, including the nation- 
wide assessment of biomedical equipment at all VA medical centers 
by Januaiy 1998. VHA’s plan is to complete any necesst^ renova- 
tion by July of 1998, validation by January of 1999, and implemen- 
tation by October of 1999. 

As of August 31, 1997, 30 percent of VHA’s mission-critical appli- 
cations are compliant, liiis percentage represents both the VIS’lA, 
which used to be DHCP, and the VHA corporate s^tem applica- 
tions. I would add that the definition of compliance is the fact that 
includes those applications that are intended to be retired, as de- 
fined by 0MB. 

VHA has assigned priorities to and scheduled the renovation of 
VHA mission-critical systems. VISTA information system applica- 
tions have been categorized according to their criticality to VHA’s 
mission. To support the detailed ViSTA application assessment 
process, VHA has acquired and is using an automated tool to sup- 
port code analysis for both the Nationm software applications and 
for locally developed software applications. VHA has begun to use 
this tool on some of its larger, more complex appUcations; code that 
will require renovation appears to be limited. As of Au^st 31, 
1997, 31 percent of VISTA applications have been assessed and 27 
percent of VISTA applications are compliant or will be eliminated 
by the year 2000. 


VHA is currently assessing all of its corporate information sys- 
tems. System owners have been asked to determine the compliance 
status of their systems and to establish schedules for completing 
the process if the systems are non-compliant. To date, 37 percent 
of the corporate systems have been assessed, 33 percent are either 
already compliant or, again, will be eliminated by the year 2000. 

VHA has completed its inventory of commercial-off-the-shelf 
products for each hospital and has begun to determine the compli- 
ance of these products. 

For biomedical equipment, as we testified in June, the potential 
year 2000 impact on biomedical equipment is a National issue, 
clearly, affecting both the private sector and Federal health care 
communities. VA, sdong with other agencies and the private health 
care community, is a consumer of biomedical equipment; we do not 
regulate the industp^. Let me bHng the subcommittee up to date 
on the specific actions VA is taking in the area of biomedical 
eqimment. 

VHA formed the Medical Devices InteOTated Product Team, a 
multi-disciplinary oversight committee wittiin VHA, to assist with 
identifying, inventorying, assessing, and evaluating medical devices 
at risk. 


A subcommittee of this team created a database listing manufac- 
turers of medical devices currently in use in VHA. Experts from 
the team were consulted to ensure that manufacturers in aUSpe- 
cialty areas were included. A letter requesting more detailed infor- 
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mation and plans from biomedical manufacturers was sent on Sep- 
tember 10 to all 1,580 manufacturers in the database. Vendors 
were asked to respond by October 3; thus far, 135 responses have 
been received. VHA is reviewing these responses and will share the 
results with the Food and Drug Administration. 

For VBA: significant progress on year 2000 efforts has been 
made in recent months. As of August 31, 1997, 52 percent of VBA’s 
apphcations have been renovated and made year 2000 comphant. 
IVo payment applications, Chapter 31, the Vocational Rehabilita- 
tion ^ogram; and a small one, the Reinstated Program for Survi- 
vors are compliant. Our insurance apphcation is on schedule with 
its renovation and wiU begin testing in February of 1998. 

We testified in June that we awarded a task order for oversight 
support. The oversight team completed their assessment of VBA’s 
year 2000 effort. Their assessment substantiates the attention VBA 
has given this issue. VBA’s year 2000 effort is on track and its 
schedules and resources are realistic. The oversight tesun has made 
suggestions and recommendations that are being incorporated into 
VBA’s year 2000 project plan. 

Overall, education system milestones are on track for completion 
within the projected timeframes and well before any application 
fail date. However, the project completion date provide by our con- 
tractor shows a slippage for the Chapter 1606 redesign component 
of the education system. This slippage has not jeopardized our 
overall completion date for making education systems compliant. 

As for loan guaranty applications, task orders have been award- 
ed, and will be awarded, to renovate non-compliant apphcations en- 
suring that all loan guaranty apphcations are comphant by the pro- 
jected timefi-ames and before any fail date. 

VBA is developing a new apphcation for real-estate property 
management. That schedule has slipped, but that will not impact 
the year 2000 schedule because the existing apphcation is already 
comphant. 

Let me address the compensation and pension apphcation and its 
status. Forty-six percent of compensation and pension modules are 
year 2000 comphant. However, year 2000 work is competing with 
legislative program changes for spina bifida and incorporating Min- 
imum Income for Widows, plus preparing for the annual cost of hv- 
ing adjustments. To minimize the risk that the complexities of im- 
plementing legislative changes would jeopardize year 2000 efforts, 
VBA awarded a contract, very recently, for renovation support of 
our compensation and pension apphcation. This contract provides 
an automated year 2000 conversion tool for the apphcation and ad- 
ditional contract support. 

The oversight team that we’ve mentioned, that we’ve formed, 
both with a contract and some of our folks, has identified C&P as 
our hipest risk in VBA in the year 2000. Managing the contract 
and developing detailed plans for apphcations testing to be done by 
the VBA staff in Hines, IL need to be improved. We agree with the 
team’s assessment and are taking action to meet this need. 

VBA has addressed all areas of potential year 2000 problems. 
They have assessed ah of their third party products and have budg- 
eted for their replacements. In addition, VBA is working hard to 
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resolve interface issues. Forty percent of their interfaces are year 
2000 compliant as of today. 

At the Austin Automation Center, we provide VA-wide informa- 
tion technology support for all components of the Department. As 
of August 31, 1997, 79 percent of the applications they support 
have been renovated and are year 2000 compliant. The AAC, as I 
call the Austin Automation Center, plan is to have all systems ren- 
ovated by September of 1998, vahdated by October or 1998, and 
fully immemented by September of 1999. 

VA, VBA, and VHA representatives are actively involved in sev- 
eral interagency efforts to find common solutions to year 2000 is- 
sues and are representing VA’s interest in several subgroups of the 
Federal CIO Council SulKommittee on the year 2000. Included are: 
the biomedical equipment, telecommunications, and building sys- 
tems subgroups. 

In summary, Mr. Chairman, VA, organizations have prepared de- 
tailed systems inventories; and developed testing methodolo^es, in- 
dividual project plans, and contingencies. We are monitoring our 
progress for each application suprarting our mission-critical sys- 
tems. We are also monitoring such Key elements as estimated lines- 
of-code, number of modifies, operating systems and COTS 
packages. 

We are committed to ensuring VA’s information systems will pro- 
vide uninterrupted service supporting the full range of veterans 
benefits delivery and medical care for the year 2000 and beyond. 
I thank you for this opportunity to present our prowess on the year 
2000. Mr. Albinson, Mr. Quinton and I woifid oe happy to answer 
any of your questions. Thank you very much. 

[^e prepared statement of Mr. Catlett appears on p. 51.] 

Mr. Evans. Thank you, Mr. Catlett. The GAO ana your outside 
oversight team, have strongly indicated that better management is 
essential to year 2000 compliance. What additional steps will you 
be taking to solidify year 2000 management efforts? 

Mr. Catlett. Mr. Chairman, I thmk the steps that we are now 
taking are sufficient; and I say that in this way: we meet monthly 
with these two p;entlemen and their staffs to review progress, to 
look at the trackmg that’s going on. 

I’ll reuse an issue that you mentioned earlier. You noted that we 
had identified 11 mission-criticed systems, and there weis a con- 
cern — a legitimate concern — reused by you that that may be too 
few, when there were other depeirtments that listed hundreds. But, 
witliin tiiose 11 systems we have over 500 applications. And we 
have people on my staff emd on these two gentlemen’s staffs that 
are looking at those daily to track them, lankly, we use the 11 
systems to make it easier for you and for me to look at and wve 
you a broad overview of what om* progress is in terhis of deahng 
with all tile complexities and a wide variety of applications that we 
deal with. 

So £^ain, I’d say that, as we have attention brought to us both 
by GAO and our own contractors that we’re hiring to identify prob- 
lems in the schedifies that we have developed, we’ll react to those 
within this fi'amework that we’ve set up. 

One thing I would add, again it’s nothing new based on this GAO 
report — ^the GAO has been very helpful in the things they have 
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identified, but as we did last year we will have an indep^dent as- 
sessment of our efforts again m the December to March timefi'ame. 
Actually, I would like to have it a little sooner, but we’re going to 
wait for the VHA assessment to be completed and then we’re going 
to have an independent contractor come in and look at what we’re 
sa3dng both in mose plans and also the work that’s been identified 
as completed, both in VHA and VBA, and at the Austin Automa- 
tion Center. 

So, we understand the urgency, we imderstand it’s a lot of work 
and we’re putting forth a good effort and we’ll continue that and 
certainly intensify it as indications come, both from ourselves, fi*om 
our contractors, and firom GAO. 

Mr. Evans. During your testimony in June you downplayed the 
seriousness of the problem within the Veterans Health Adnunistra- 
tion. Do you still have that same level of optimism with regard to 
the year 2000 challenges faced by VHA. 

Rw. Catlett. I’m going to quibble with your words there in 
terms of “downplaying.” We have a schedule. I still define the prob- 
lem of VHA as one ^at’s broad but not very deep. As we Imow, 
the size of that system and the number of applications and the 
number of specific activities out there are numerous, huge in num- 
ber. And, we have to look at all of those. VHA is on the schedule 
that they had projected and we had submitted to you in Jime; and 
as I said, I’m sure, that as we have had with VBA to date, we’ll 
find areas where we will have to intensify our effort. I think the 
resources are there within VHA to do that, both in terms of the 
personnel that vdll be needed to do it and the dollars that will be 
necessary to do that. 

The one thing I would add, is that in terms of biomedical equip- 
ment, 1999 is &e year of concern for me for biomedical. In terms 
of systems work, that has to be underway now; and particularly 
throi^h 1998. For biomedical equipment, it’s largely going to be 
funding, if its non-compliant, the replacement of that equmment. 
We at tiiis point, don’t expect that to be a huge number. But we 
will want to have that information in time to make an adjustment 
to our 1999 budget request, if necessary, for biomedical equipment. 

Mr. Evans. Because of a pending vote. I’d like to yield to the gen- 
tleman from Pennsylvania, in case he might not be able to make 
it back. If there are any questions? 

Mr. Mascara. My question is, deals with the possibility of not 
solving the problem entirely, and what could happen then. Do you 
have a back-up plan? If all else fails, the worst possible scenario 
not being able to solve the problem entirely by the year 2000? 

Mr. Catlett. Well, Mr. Congressman, as GAO noted, there are 
a lot of negative consequences for not getting it done. We will — we 
do have plans, and as GAO says, we need to update our risk as- 
sessment, which we agree with eind will do. But, I don’t believe this 
is an issue of not get&ig the checks out. We could be late getting 
the check out; we may ^et the wrong amount out; and that’s a 
problem. I’m not mmimizmg that. But it is not a question of veter- 
ans not getting paid. If we have to do it by paper and pencil, well 
do it. But again we don’t think that we’re in that mode of a crisis. 

I agree with some of the things that you had to say in the sense 
that this is a huge problem. But again, we think we’re on top of 
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it, and fully expect in that there will be problems that come up 
that we haven’t anticipated; but we think we have the resource lev- 
els required. Much of the resoiu-ces we need, we already have. It’s 
not a question of getting contractor help for the first time, as VBA 
already has. But a lot of the work in VHA that’s going to be re- 
quired, will be done by their own staff. It’s a matter of making sure 
within the staff that deals with information technology systems, 
that they get a focus. And, Mr. Albinson has it imder way. And I’m 
veiy confident that we are paying attention to this and tracking 
this monthly so that when problems do arise, as they will, we wiU 
respond quickly. Chir cost estimates will probably go up, but we are 
a very, very tiny part of that billion dollar increase that’s been 
talked about here today; I want that on the record. We’ve increased 
our estimate by $18 million on a base of $144 million over this 
three year peri^. I expect that they will go again. 

And as I said in Jime, in biomeoical equipment, we haven’t esti- 
mated the impact there. We expect it not to be large; but not to 
be large is in the sense of a $17 billion a year operation that the 
health care system is. So we will be seeing om* prices go up as we 
get the information on biomedical that we expect. 

So, again, we are tracking the problem, we are watching the 
problem, and as issues rise that we haven’t anticipated, I am con- 
fident that we have the resources to address those. 

Mr. Mascara. Thank you, Mr. Catlett. Thank you, Mr. Chair- 
man. 

Mr. Evans. Thank you. We’re going to go to recess now because 
of a pending vote which may be followed by another vote, as I un- 
derstand it. So, we’re going to recess and try to get back by about 
10:30 or so. 

Mr. Catlett. Sure, Mr. Chairman, we’ll be here. 

Mr. Evans. We’ll recess at this time. 

[Recess.] 

Mr. Evans. The hearing will now resume, and we’ll yield to ma- 
jority coimsel. 

Mr. Kinraton SMITH. Thank you. 

Mr. Catlett, the VA has some significant computer interfaces 
with other agencies and departments of the Federal Government. 
What are those interfaces, and what is the status of Y2K compli- 
ance for those interfaces? 

Mr. Catlett. I’m going to ask Mr. Quinton to give you some in- 
formation on that, and we’ll probably need to provide some specifi- 
calW for the record, to get more detailed information on it. 

(Subse^ently, the Department of Veterans Affairs provided the 
following information:) 
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Mr. Catlett. But, as you noted or implied, clearly, with the 
m^'or departments and agencies throughout the government, we 
have a lot of interfaces as we move payments and move informa- 
tion back and forth. The one I’m most concerned about now is Hie 
Department of Treasury. I’ve had preliminary discussions with the 
CIO there. We have met. We have a list of the interfaces with 
Treasury that affects primarily our payments to veterans, which is 
the first focus that we all have. Well be meeting with them soon 
at a staff level^'includi^ the Financial Management Service, FMS, 
as they call it, and their CIO. We will review our roles and respon- 
sibilities and reach agreement on the list of interfaces. 

And as I said, Mr. Quinton’s office has put together a co^rehen- 
sive list of the interfaces that VBA has with Treasury. We have 
done some work at our Austin Automation Center for the same 
thing, and we will be meeting with them in the next several weeks. 

Mr. Quinton. Sir, our inventory of interfaces shows a total of 
731, and that includes interfaces to all of our mission-critical sys- 
tems at our Hines facility, Philadelphia and Austin. Of the 731, 
342 involve the Hines Data Processing Center and reflect the inter- 
faces which provide information to or firom our payments system. 
I think it is important to note, when we speak of interfaces, a sig- 
nificant amount of these are for information and are not payment- 
related. 

As we said earlier this morning, 40 percent of those interfaces 
are compliant; 33 percent are not compliant, and our approach 
right now is to continue to look at every single interface to make 
a determination of whether it involves a date field and then to get 
it resolved. A significant percentage of the 731 interfaces are inter- 
nal to VA, as opposed to sharing information with other Federal 
agencies, as Mr. Catlett indicated. 

Another effort that we will take with interfaces is to separate 
those that result in the generation or execution of a payment from 
those that would involve information for report purposes. This will 
provide a focus for us to address Hie payment issues first. 

Mr. Kingston Smith. Thank you. It’s our understanding that the 
VA is planning to take $5 million from VETSNET funding to help 
fund tne increased financial requirements of the year 2000 compli- 
ance. Is that correct? 

Mr. Catlett. I’m glad you reused the quesHon. We had a hearing 
last week on GPRA, and that issue came up as a side item. As we 
discussed with you, this committee, over this past year, we’ve made 
the commitment; the Deputy Secretary and now the Secretary-des- 
ignate made the commitment that, if we have a funding need for 
year 2000 purposes, that is more than other sources can produce, 
we would use our VIBTSNET money. But that’s difierent Hum what 
folks eure looking at now in terms of an Appropriations Committee 
report, a Senate report, that said, shift that $5 million. The $5 mil- 
lion I think you’re referring to is in a Senate Appropriations sub- 
committee report that says, for 1998, to move the VETSNET 
money. I think the/ve reached that conclusion, based in part at 
least on the NAPA report. 

We have exprossed our opinion that it’s important to move for- 
ward with VETSNET. We understand the concerns about the tim- 
ing and the schedule for VETSNET, but, nonetheless, we support 
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the VETSNET effort, and will continue to move with that. So, as 
I said, the distinction is we may have to take some money off 
VETSNET for year 2000. As stat^ last spring, we’re still commit- 
ted to that. Ri^t now we don’t think we^ ne^ to, but, again, it 
a ll depends on what happens in the conference the next few days 
for the 1998 budget. That same commitment stands; if we need it, 
we will move it. At this point, making an assumption about the 
amount of money we expect to get for 1998, we don’t think that will 
be necessEuy. 

Mr. Kingston Smith. Thank you. 

Mr. Evans. Your testimony and the testimony of GAO indicates 
that the renovation of VBA’s compensation and pension application 
appears to be a migor hurdle. Can you describe in detail what the 
oversight team recommended in this regard and outline what steps 
you will be taking to address this issue? 

Mr. Catlett. Yes, sir, I’d ask Mr. Quinton to give you those de- 
tails. 

Mr. Quinton. Yes, sir, Mr. Chairman. We agree that the com- 
pensation and pension program is certainly our most critical sys- 
tem, and it is also one that we must pay closest attention to. In 
essence, the oversight team focused on the issue of increased man- 
agement of the conversion efibrt, and that effort is focused on a 
change in approach with our in-house staff at Hines. Their experi- 
ence truly is in the development and maintenance of the compensa- 
ti(m system, where they have the expertise developed over some 20 
to 30 years. We have accelerated our effort to make the systems 
compliant, and in that process we have added a significant contrac- 
tor effort. 

The concern raised in oversight is whether or not our staff, who 
over the years have been developing and maintaining that system, 
had the contract management expertise, and we recognize that that 
is a shortfall. So we have to provide training and provide onsite 
support to manage a contract. We do not twheve this is insur- 
mountable. In essence, with the contractor actually being onsite, 
working hand-in-hand with our developers, it becomes more man- 
ageable than it would be if the contrac^r was offsite and we were 
looking for a deliverable. So the focus truly is one of adding an 
extra task to our staff at Hines to say; in addition to doing the 
work that has been done for the last 25 or 30 years, also manage 
the day-to-day activities of a contractor. It is our intention right 
now to proviae additional management support to the staff, as I 
said earlier, and to provide inundate training to our project man- 
agement staff at Hines. 

Mr. Catlett. Mr. Evans, I would add, I think as I noted earlier, 
this obviously will be em item that we will review in our monthly 
status reports with Mr. Quinton, and we’ll be glad to keep the com- 
mittee informed of our progress there. 

Mr. Evans. All right. With regard to the medical device issue, 
are you satisfied with the feedback you’ve received to date fi^)m the 
manufacturers? Do you believe that the Food and Drug Adminis- 
tration has conduct^ sufficient outreach to accurately determine 
the severity of the problem among medical device manufacturers? 

Mr. Catlett. The answer to yoiir first question is yes, and Fm 
going to ask Dave to speak to the second because I think he’s had 
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more direct communication and involvement than I have with the 
FDA. 

Mr. Albinson. Thank you, Mark. 

Earlier this month we sent a letter from the VA to the 1,580 
manufacturers of medical devices actually in use at oiu: facilities. 
We have been very encouraged by the response of industry to this 
letter, and over the past 3 weeks we’ve already received nearly a 
15 percent response rate. Of those who have answered back, 70 
percent have indicated that there is no time clock involved in their 
particular medical device; approximately 15 of the remaining 30 
percent, were almost half, have indicated that they do use a clock; 
it is compliant, and the remaining 15 percent have indicated that 
th^ need to check further into the problem. 

Working through the numbers, mat means that we have some- 
where between 200 and 300 manufacturers of biomedical devices 
which may produce an issue for us. We feel this is a manageable 
number, and we’re addressing it directly, and we’ve been very en- 
couraged by the cooperation we’ve received from industry. 

Mr. Evans. Can I get you to submit that data for the record, 
please? 

Mr. Albinson. I certainly will. 

Mr. Evans. Thank you. 

(Subsequently, the Department of Veterans Affairs provided the 
following information:) 



Status of Medical Device Manufacturer Responses to VHA industry Letter 

(as of September 23, 1997) 
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Mr. Evans. All right, I yield to msyority coiinsel. 

Mr. Kingston SMITH. Thank you. 

What a^on does the VHA plan to take on those manufacturers 
who have not responded to your September 9, 1997 letter? 

Mr. Albinson. Well, we’re going to give it a little more time. It’s 
been 2 weeks. At some point we will follow up with them directly, 
and the letter was couched sudi that it requim a response wheth- 
er or not they thought there was a problem. So we mtend to get 
a response from all 1,580 manufacturers eventually. 

Mr. Kington Smith. At this point does VHA have any indica- 
tions of Y2lC compliance problems with any of its biomedic^ equip- 
ment? 

Mr. Albinson. Our current indications are that 15 percent of the 
respondents have indicated that they need more time in order to 
get back to us, and we’re assuming that there may be problems 
with those manufacturers. They have been highlighted in our 
efforts. 

Mr. Catlett. Kingston, I’d add that we would, if we have dif- 
ficulty with manufacturers corresponding with us, this is an issue 
that well raise back through the CIO council committee on this 
that I believe FDA has. I know it’s an HHS-led effort, and we will 
make sure that that committee and 0MB, if necessary, are in- 
volved with that, to bring some leverage to getting that attention 
on this issue. So it’s something that, as Mr. iUbinson said, we will 
follow up ourselves this fall, in the month of October, and if there’s 
continued lack of correspondence, then it’s an issue that well raise 
within the administration with the OMB-led effort to make folks 
aware of that, to try to bring some more leverage on the issue. 

As we testified, we’re not probably — ^for many of these companies, 
we do a lot of business from our view, but from their view we may 
not be a large customer. So we wanted to bring all the leverage we 
can with the Federal (^vemment effort, not just our own. 

Mr. Evans. I want to thank the panel for testifying today, and 
well excuse you right now. 

Mr. Catlett. Thanks. 

Mr. Evans. And at this time well brin^ our third panelist for- 
ward: Tom Shope, Acting Director of the Division of Electronic and 
Computer Science, Office of Science and Technolo^, Center for De- 
vices and Radiological Health, of the Food and Diiig Administra- 
ti(Hi. 

Doctor, you may proceed when you’re ready. 

STATEMENT OF THOMAS SHOPE, ACTING DIRECTOR, DIVI- 

SION OF ELECTRONIC AND COMPUTER SCIENCE, OFFICE OF 

SCIENCE AND TECHNOLOGY, CENTER FOR DEVICES AND RA- 
DIOLOGICAL HEALTH, FOOD AND DRUG ADMINISTRATION 

Mr. Shops. Thank you. Good momii^, Mr. Chairman and mem- 
bers of the subcommittee. I’m Thomas Shope. I’m the Acting Direc- 
tor, as the chairman said, of the Division of Electronics and Com- 
puter Science in the Office of Science and Technology of the Center 
of Devices and Radiological Health of the Food ana Drug Adminis- 
tration. 

Having previously testified before this subcommittee at the June 
26th hearing. I’m pleased to be here today to provide fiirther infer- 
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mation about the year 2000 date isaoe and its in^tact on medical 
devices. Althou^ FDA has not received any significant information 
since the previous hearings to indicate that there will be any mtgor 
impact on medical device safety, I am here to assist the committee 
in its efforts to examine the issue. 

FDA is responsible for protecting the public health by helping en- 
sure that mescal devices are safe and ^ective. Any computer soft- 
ware that meets the statutory definition of a medical device is sub- 
ject to applicable FDA medical device regulatiois. An issue that 
has been identified as warranting review is the impact of the year 
2000 on some medical device computer systems and software appli- 
cations. These products could be impacted by the year 2000 date 
problem only if they use a date in their algorithm or calculation or 
function or in recordkeeping and if a two-digit year format for the 
date was tised in their design. 

At the last hearing, I described some of the technical issues asso- 
ciated with the types of products that we regulate. I’ll not go into 
that in detail today. It is in our written testimony. 

In July, the Center sent a letter to all medici^ device manufac- 
turers, approximately 13,000, both domestic and foreign, to ensure 
that manufacturers were addressing the year 2000 issue, and we 
reviewed both embedded and non-embedded software product is- 
sues in that letter. In addition, we asked manufacturers to review 
any computer-controlled design, production, or quality control proc- 
esses for the possible impact of a two-digit date in any of &ese 
computer applications. 

This letter reminded manufacturers that, pursuant to manufac- 
turing regulations, they have a legal obligation to investigate and 
corre^ devices that fail to operate according to their specifications 
because of an inaccurate date-recording or c^culation operation. 

Our letter did not require a response fiom the manufacturers. 
We have regulations already in place that require manufacturers 
to notify us, FDA, of problems with devices that could lead to a sig- 
nificant risk to public health. 

For devices t^t are already on the market, we requested manu- 
facturers to conduct hazards and safety analyses to determine 
whether device performance is affected. We expect manufacturers 
who identify products which have a date-related problem that could 
eiffect safety or effectiveness of a device to take the necessary ac- 
tion to remedy the problem. It is the obligation of the manufactur- 
ers to notify FDA of problems with devices that present a risk of 
serious injury, and of corrective actions taken to reduce a risk to 
health. Again, let me stress that we do not anticipate a large num- 
ber of devices to be impacted or a large number of significant prob- 
lems which would affect patient safefy with individual medical de- 
vices. We want to ensure the continued safety and effectiveness of 
these devices by addressing the issues before &ey arise. 

Currently, and for future medical device pre-market submissions 
for new products, FDA will review device design and function to as- 
sure that the products have been desimed to pmform date record- 
ing and computations properly and safely. We vnll also be working 
with manufacturers on any reported problems with the devices that 
are currently on the market and in monitoring their activities. 



21 


Thank you, Mr. Chairman, for the opportunity to tell you about 
the issue of the year 2000 in medical devices. Let me assiure you 
that we at FDA take this issue very seriously, as we do all prob- 
lems that could affect public health. We have been evaluating the 
possible impact on devices since early last year. We are committed 
to a scient^cally-sound regulatory environment that will provide 
Americans with the best m^cal care. FDA has looked at this issue 
and does not see any rntgor problem with medical devices that can- 
not be addressed satisfactorily. It is the manufacturer’s responsibil- 
ity to meet high standards in the design, manufacture, and evalua- 
tion of their p^roducts. They are ultimately responsible for these 
products, but FDA will provide the re^atory framework to ensure 
that the collaborative efforts of both tne FDA and the manufactur- 
ers result in the best medical device products. 

That’s all my oral statement, sir. 

[The prepared statement of Mr. Shope appears on p. 58.] 

Mr. EVANS. Thank you. Doctor. Your testimony indicates that the 
FDA has sent a letter to all medical device manufacturers remind- 
ing them of their obligation to advise the FDA, should there be any 
serious safety risk associated with the year 2000 problem. Given 
the FDA’s ultimate responsibility to address the year 2000 prob- 
lem, what additional steps will you be taking to ensure the safety 
and effectiveness of such devices? 

Mr. Shope. There are a number of steps that we are involved in 
or that we are contemplating taking to further our activities in this 
area. For one thing, we’ll be stressing with our inspectional force 
that visit the manufacturing plants to raise this issue with the 
manufacturers during those inspectional visits. We will be carefully 
monitoring any reports of corrections or recalls that manufacturers 
are required to give us about products that could present a signifi- 
cant risk when they take an action to either correct a problem or 
to recall their product, and peirticularly we’ll monitor those for any 
year 2000-type problems. 

We are probably most active with the Chief Information Officers’ 
Subcommittee on the Year 2000 Working Group which is dealing 
with medical devices and scientific research instruments. These are 
two types of products for which the Federal Government has a 
large interest m the yeeu* 2000 compliance issue, as purchasers and 
users of those kinds of products, as well as an interest in making 
sure that the public users of those kinds of products have informa- 
tion on the possible year 2000 impact. 

This group is look^g at ways to provide information to the Fed- 
eral purchasers of these products, as well as to the public, on those 

[ >roducts which will have problems due to the year 2000 date prob- 
em, and the steps which the manufacturers of those products plan 
to t^e to deal with the problem. 

Our cxirrent approach to this is probably going to be the estab- 
lishment of a website, hopefully in copjunction with the current 
GSA year 2000 website, and to provide the opportunity for manu- 
facturers to provide information on that site regarding the year 
2000 status of their products. We would expect that this would be 
a mechanism where by the manufacturer could eitiier provide the 
information which would be posted there or provide a Imk to their 
own web site, where they could provide the detailed information 
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themselves on the status of their products. This would provide a 
central facility for anybody who’s concerned about their product 
status to check and verify. 

We will continue to look at new products coming to market to 
make sure they’re compliant, and we’ll investigate any reports, as 
we have been doing this summer, about products that may have a 
problem. We have seen in the public press and in other venues re- 
ports of products that have problems. We’ve actively investigated 
any of those that have come to our attention. Most of those — ^in 
fact, all of tiiem that we have looked into — ^have turned out to be 
unfoimded reports. It is not the defibrillators that are going to have 

S roblems as far as we can determine. Pacemakers are not ^oing to 
ave problems. Our last episode was looking into the infusion 
pump issue. We contacted ^ the U.S. manumcturers of infusion 
pumps, and were not able to determine a date problem associated 
with the operation of infusion pumps from those contacts. 

So we continue to actively follow up on any reports that we 
have. We expect that as manumcturers assess their products and 
determine that there may be a product that contributes a risk, well 
get that information from the manufacturer and well monitor their 
efibrts to correct the problem. 

Mr. Evans. Apparently, the FDA regulations require that manu- 
facturers alert the agency if they think a medical devise poses a 
ssdety threat, but don’t require manufacturers to provide feedback 
if they do not anticipate a safety. Put in fairly simply terms, how 
do we know whether the manufacturers are up-to-spiWd on possible 
year 2000 issues? How can we be sure that these manufacturers 
are properly addressing possible year 2000 issues? 

Mr. Shope. Well, I think we have taken a number of steps to 
make sure manufacturers are aware of the issue. I think our letter 
is the first step. We have had conversations with the mqjor associa- 
tions that represent the medical device manufacturers, the Health 
Industiw Manufacturers Association, National Electrical Manufac- 
txmers Association, and the Medical Device Manufacturers Associa- 
tion — to bring it to their attention and to encourage their commu- 
nication with their membership as to the problem and the need to 
take actions here, and to discuss with these groups the usefulness 
and receptivity of the industry to the website idea of a way to cen- 
tralize and post the information. That’s one of the areas where 
we’ve taken steps to try to make manufacturers aware of the issue. 
We’ll continue to follow up on any voluntary reports and reports 
from user facilities that we obtain that would indicate a problem 
with a device. 

I think manufacturers, though, outside our regulate^ scheme, 
have the desire to satisfy their customers and some liability issues 
that would probably be more influential in their actions, perhaps, 
than some of the FDA inqmries that we might be making as to the 
status of things. So I think there are a number of things that push 
the manufacturers to deal with this problem and to deal with it in 
an upfront manner. 

Mr. Evans. From a policy perspective, do you believe your agency 
has the necessary tools to adequately survey and receive useful 
feedback from manufacturers on the year 2000 compliance issue? 
And given the unique nature of this issue and the limited amount 
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of time left to address it, is there anyt^g Congress can do to as- 
sist you in getting a better handle on this situation? 

Mr. Shops. Well, I think we have done the things that the cur- 
rent law and regulations give us in the way of tools to explore 
these issues. I think if Congress has some other ideas on tl^gs 
that might be done to assist us in gathering information, we’d cer- 
tainly glad to discuss those with you and see what could be 
worked out there. 

We are different than, say, the Veterans Health Administration, 
who can go to a manufacturer and ask questions because of the 
contractu^ relationship they have as customers, and prospective 
customers, to be asking for ii^ormation on things they may be buy- 
ing. We, as a regulatory agency, have to make sure we don’t impose 
reporting burdens on manufacturers or the public that aren’t ap- 
propriately consonant with our 0M6 reporting recmirements, infor- 
mation request requirements. So we work witnin the existing 
freunework. There might be some things that could be done to that 
frtunework that would give us additional flexibility, but I person- 
ally think that we have the tools that we need to address this prob- 
lem. T^e manufacturers will be responsible, will take the necessary 
actions. 

One of the thinm about medical technology is it’s a very fast- 
moving kind of tedmology, so it wouldn’t be unusual to find that 
only very old products are the ones that are affected here, and 
those are likely to be on a replacement schedule. 

Mr. Evans. Your testimony indicates there are a very limited 
number of devices that will probably have year 2000 problems. Can 

J rou give us a list of devices that might have those kinds of prob- 
ems that you’re aware of at this time, and submit that to us for 
the record? 

Mr. Shope. We covdd attempt to put together such a list, I think. 
That will be based on our internal expense of our medical device 
review staff as to the technologies involved and which ones of those 
could have a potaatial problem. Again, without knowledge of the 
actual algorithms that memufacturers have implemented, it’s a lit- 
tle difficult to know exactly which products will or will not have 
problems. 

(See p. 72.) 

Mr. ^ANS. At this time I recognize menority counsel. 

Mr. Kingston Smith. Dr. Shope, what nappens if manufacturers 
do not live up to their legal obhgations and public responsibilities? 
What harm could come to members of the public and to veterans? 

Mr. Shope. If tbere is a product that somehow encounters a year 
2000 problem, I think there’s a possibility for either failure of diag- 
nosis or failure of treatment, based on that failure. 

Mr. Kingston Smith. Has the FDA done any systematic analysis 
of the types of risks that might be posed to the public? 

Mr. Shope. As I say, when we started lookmg at this problem 
about a year-and-a-half ago, we had discussions with all the medi- 
cal device review staff, basically polled and did a consideration of 
in what kinds of devices could a year 2000-associated problem lead 
to a significant risk to the patient or to public health, and I have 
to tell you that, fix)m our internal discussions of our knowledge of 
the various te<^ologies and the way devices function, it was a 
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rather short list of those that came up that could be potential prob- 
lems. We don’t know for sure whemer there are problems with 
those products because of not knowing the intimate details of the 
algorithms that were used, but we do nave a list of a few kinds of 
products for which there is a potential for risk. Followups with 
some manufacturers of those products, however, have indicated 
that they are not subject, typic^y, to date problems because they 
didn’t use a two-digit date format. 

Mr. Kingston Smith. If a manufacturer doesn’t live up to its obU- 
gations to make information available to the FDA, how will the 
FDA know there’s a problem until after it’s occurred? 

Mr. Shope. I think there will be a lot of commercial pressure to 
satisfy customers, and so I think manufacturers are unlikely to not 
live up to their obligations. There are, of course, penalties for fail- 
ing to notify FDA of problems that come to the attention of the 
manufacturer. We’ve put the manufacturers on notice that this is 
a potential problem with our letter. That means that they’re obli- 
gated to investigate and to deal with any potential problem. Fail- 
ure to do that is a violation of the regulations and would subject 
the manufacturers to sanctions. 

Mr. Kingston Smith. Thank you. 

Mr. Evans. Thank you, Doii^r. We appreciate your testimony 
today. 

This concludes our hearing. Without objection, I will include 
Chairman Everett’s closing statement in the record. 

[The statement of Chairman Everett follows:] 

Closing Statement 


I appreciate the attendance and testimony of our witnesses this morning. 

It does appear that VA, particularly the BeneSts Administration, is making 
progress on Y2K compliance. But, as GAO points out, substantial risks remain for 
the VA, and that means substantial risks remain for our veterans. So we’re not out 


of the woods yet. 

I remain concerned about the biomedical equipment situation. It’s a much bigger 
problem than just the VA. FDA’s rather rela:^ approach strikes me as inadequate 
and I do not see the kind of leadership within the administration that is necessary 
to assure the American public that the biomedical equipment used in this country 
is going to be safely and effectively operating on January 1, 2000. The basic ap- 
proach of leaving it up to the equipment manufacturers does not inspire con- 
fidence — ^at least not my confidence. I mtend to continue my interest in this subject. 

This has been hearing II on these issues. In the next session, or sooner if need 
be, the subcommittee wul have more hearings, and we will maintain our focus until 






Mr. Evans. I thank all the witnesses and interested citizens for 
being here today, and we now conclude the hecuing. 

[Whereupon, at 11:05 p.m., the subcommittee ac[joumed subject 
to the call of the Chair.] 


APPENDIX 


REMARKS OF THE 
HONORABLE JAMES E. CLYBURN 

RANKING DEMOCRATIC MEMBER 

SUBCOMMITTEE ON OVERSIGHT 

AND INVESTIGATIONS HEARING 

ON YEAR 2000 COMPLIANCE 

SEPTEMBER 25.1997 


I WOULD LIKE TO COMMEND CHAIRMAN 
EVERETT FOR HAVING THE FORESIGHT TO PUT 
TOGETHER THIS CRITICAL HEARING THIS 
MORNING. 


IF THE VA IS UNABLE TO SUCCESSFULLY 
MANAGE ITS TIME AND RESOURCES TO DEAL 
WITH THE IMPENDING YEAR 2000 CRISIS, IT WILL 
PLACE THE VETERANS IT EXISTS TO SERVE AT 


(2B) 


GREAT RISK. 
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I AM PLEASED THAT THE VA HAS BEGUN THE 
MAJOR SYSTEM-WIDE CHANGES THAT MUST BE 
DONE IF VA IS ABLE TO BRING ITS MISSION 
CRITICAL SYSTEMS INTO YEAR 2000 
COMPLIANCE. 

THE VA, AND PARTICULARLY THE VETERANS 
BENEFITS ADMINISTRATION, HAS BEEN WORKING 
HARD OVER THE PAST SEVERAL MONTHS TO 
ADDRESS THE YEAR 2000 ISSUE, AND I WANT TO 
COMMEND THEM FOR THEIR EFFORTS. 

THE YEAR 2000 PROBLEM IS OF CRITICAL 
CONCERN TO THIS COMMITTEE AND TO OUR 
VETERANS. THANKS TO THE LEADERSHIP OF 
CHAIRMAN EVERETT, THE VA CAN EXPECT 
CONTINUED OVERSIGHT ON THIS ISSUE 
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THROUGHOUT THE REMAINDER OF THIS 
CONGRESS. 

THANK YOU AGAIN. MR. CHAIRMAN. I LOOK 
FORWARD TO THE TESTIMONY THIS MORNING. 
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CONGRESSMAN MASCARA’S STATEMENT 
VA HEARING ON YEAR 2000 COMPUTER COMPLIANCE 
SEPTEMBER 25, 1997 

GOOD MORNING MR. CHAIRMAN. I AM PLEASED 
TO BE TAKING PART IN THIS IMPORTANT HEARING TO 
ASSESS WHAT PROGRESS THE VA HAS MADE IN 
RECENT MONTHS IN FIXING THE YEAR 2000 
COMPUTER COMPLIANCE PROBLEM. 

I READ OVER THE PREPARED TESTIMONY LAST 
EVENING AND I AM SOMEWHAT TORN BY WHAT IT 
INDICATES. WHILE I WAS GLAD TO READ THAT THE 
OFFICE OF MANAGEMENT AND BUDGET HAS 
DETERMINED THE VA IS MAKING MUCH MORE 
PROGRESS THAN MANY OTHER AGENCIES, I REMAIN 
WORRIED THAT THE PROGRESS IS NOT FAST ENOUGH* 
IF THE SITUATION DOES NOT DRAMATICALLY 
IMPROVE, I AM AFRAID VETERANS COULD STILL FIND 
THEMSELVES FACING DELAYED PAYMENTS AND 
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COUNTLESS OTHER PROBLEMS ONCE THE CALENDER 
REACHES JANUARY 1, 2000. 

THIS IS UNACCEPTABLE AND I WANT TO GET 
SOME REASSURANCE TODAY FROM VA OFFICIALS 
THAT THEY ARE SOMEHOW GOING TO RECTIFY THIS 
SITUATION, PARTICULARLY AS IT PERTAINS TO 
COMPUTER PROGRAMS HANDLING VA PENSIONS, 
HEALTH AND G.I. BENEFITS. 

I ALSO MUST SAY THAT I CONTINUE TO BE 
ASTONISHED THAT THE EXECUTIVE BRANCH DOES 
NOT YET SEEM TO GRASP THE SERIOUSNESS OF THE 
PROBLEM IT FACES IN MAKING SURE ALL 
GOVERNMENT COMPUTERS ARE ABLE TO HANDLE 
THE TRANSITION TO THE NEXT CENTURY. 

I WAS STUNNED TO READ IN THE GAO 
TESTIMONY THAT 75 PERCENT OF OUR AGENCIES’ SO- 
CALLED “MISSION-CRITICAL SYSTEMS” STILL NEED 


45-928 - 98 - 3 
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TO BE REPAIRED OR REPLACED AND THAT THE 
TOTAL COST HAS NOW RISEN ANOTHER $1 BILLION 
TO $3.8 BILLION. 

AS I SAID AT THE LAST HEARING, THE PRESIDENT 

NEEDS TO APPOINT A COMPUTER CZAR TO DEAL 
WITH THIS PROBLEM AND HE OUGHT TO DO IT NOW. 

WHEN I WAS SERVING IN COUNTY GOVERNMENT, 
MANY YEARS AGO, WE WERE TALKING ABOUT HOW 
THE COUNTY WAS GOING TO DEAL WITH THIS 
PROBLEM. 

IT IS SIMPLY AMAZING TO ME THAT A LOCAL 
GOVERNMENT HAD THE FORESIGHT TO RECOGNIZE 
THAT THE YEAR 2000 PRESENTED A MAJOR 
COMPUTER PROBLEM AND BEGAN TO WORK 
TOWARDS A SOLUTION, WHILE THE FEDERAL 
GOVERNMENT WAS “FIDDLING WHILE ROME WAS 


BURNING.” 
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AGAIN, WE MUST ALL DO BETTER AND 
HOPEFULLY THIS HEARING TODAY WILL SPUR 
FURTHER ACTION. 

THANK YOU MR. CHAIRMAN. I YIELD BACK THE 
BALANCE OF MY TIME. 

THE END 
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Mr. Chairman and Members of the Subcomnuttee; 

We are pleased to be here today to discuss the progress being made by the federal 
government and, in particular, the [department of Veterans Affairs (VA), in making sure 
that its automated information systems are ready for the upcoming century change. As 
you know, we testified before the Subconunittee earlier this summer, at which time our 
report was released detailing the activities of one VA component*, the Veterans Benefits 
Administration (VBA), to make its systems Year 2000 -compliant.^ 

As requested, my testimony today will first sununarize federal progress in addressing 
the Year 2000 problem and will then examine VA and its major components. My 
statement will discuss action taken by VA as a whole, and steps taken by VBA in 
respotrse to recommendations contained in our recent report. We have just begun a 
detailed review of the Veterans Health Administration's (VHA) Year 2000 activities; 
consequently, my testimony in this area will be limited to results to date. 


'Along with VBA, the other two major VA components are the Veterans Health 
Administration and the National Cemetery System. 

^ Veterans Benefits Com puter Systems: Uninterrupted Delivery of Benefits Depends on 
Timely Correction of Year-2000 Problems (GAO/T-AlMD-97-114, June 26, 1997) and 
Veterans Benefits Computer Systems: Risks of V BA's Year-2000 Efforts (GAO/AIMD-97- 
79, May 30, 1997). 
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FEDERAL AGENCY PROGRESS: 

EFFORTS MUST BE EXPEDITED 

As we testified in July,’ time is running out for agencies and the pace needs to be 
accelerated if widespread systems problents are to be avoided as the Year 2000 
approaches. We stressed in our testimony that the Office of Management and Budget 
(OMB) and key federal agencies need to move with more urgency. Among the other 
related issues we noted was that increased attention was required on validation and 
testing of Year 2000 solutions, data interfaces and exchanges, and contingency planning. 

OMB's most current Year 2000 progress report on the federal government's efforts, 
released last week, again demonstrates that although federal agencies are generally 
making progress toward achieving Year 2000 compliance, the overall pace of that 
progress is too slow.'* Based on individual agency reports, 75 percent of the agencies' 
approximately 8,500 mission<ritical systems remain to be repaired or replaced, and the 


’ Year 2000 Computing Crisis: Time Is Running Out for Federal Agencie s to Prepare for 
the New Milletmium (GAO/T-AIMD-97-129, July 10, 1997), before the Subcommittee on 
Government Management, Information and Technology, House Conunittee on 
Government Reform and Oversight, and the Subcommittee on Technology, House 
Conunittee on Science. 

’ Progress on Year 2000 Conversion. U.S. CWfice of Management and Budget, August 15, 
1997. 
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total cost estimate htis risen to $3.8 billion, up $1 billion from the previous quarterly 
report.* 

According to OMB, reports of several of the agencies were disappointing; consequently, 
it placed ageitcies in one of three categories, depending upon evidence of progress. In 
the first category are four agencies that C^B found had "insufficient evidence of 
progress."* For these agencies, OMB established a "rebuttable presumption going into 
the Fiscal Year 1999 budget formulation process this Fall that we [OMB] will not fund 
requests for information technology investments unless they are directly related to fixing 
the year 2000 problem." 

OMB's second category contains 12 other agencies for which it cited "evidence of 
progress but also concerns." These agencies were put on notice that continued funding 
for mfonnation technology investments would be contingent on continued progress.' 
Finally, for the eight remaiiung agencies that, according to OMB, appear to be making 
ptogress-and this includes VA— funding requests will be handled in the usual manner. 


*Getting Federal Comp uters Ready f or 2000: Progress Report. U.S. Office of 
Marragement and Budget, May 15, 1997. 

‘Agriculture, Education, Transportation, and the Agency for International Development. 

'These ate Cotiunerce, Defeitse, Energy, Health and Human Services, Interior, Justice, 
Treasury, Environmental Protection Agency, Federal Emergency Management Agency, 
National Aeronautics and Space Administration, Office of Personnel Management, and 
&nall Business Administration. 
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although progress at all agencies will be reevaluated on the basis of their next quarteriy 
reports, due November 15.* 

We are encouraged by OMB's statements and believe they reflect an ittcreased urgency 
to address the Year 2000 issue. Further, we note that in its report, OMB states that it 
plans to address other issues that we raised in our July testimony.’ 

■ OMB emphasized that proper validation of changes was critical to success. It 
stated that it plarmed to meet with agerkdes over the conting monflrs to discuss 
the adequacy of scheduled timetables for completing validatirm. 

■ OMB said it would discuss with agerwies the prq>arednes8 of coirunurucations 
interfaces with systems external to the fdleral government, including those of 
state and local governments and the private sector. 

■ OMB asked agetrdes for a summary of the contingency plan for any nussion- 
critical system that was reported behind schedule in two consecutive quarterly 
reports so that it could sununarize such plans in future reports to the Congress. 

We look forward to implementation of these key activities as we continue monitoring 
OMB's leadership of the federal government's Year 2000 effort 

‘Along with VA, this category encompasses Housing and Urban Development, Labor, 
State, General Services Administration, National Science Formdation, Nuclear Regulatory 
Commission, and Social Security Administration. 

’GAO/T-AIMD-97-129. 
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VA: THE STAKES ARE HIGH 

VA is very vulnerable to the impact of the new millennium because of the large number 
of veterans and their dependents that it serves; this is why it is so important that VA's 
systems be made compliant in time to avoid disruption to the benefits and services on 
which millions of Americaru depend. Our past and current work at VA indicates that 
the Department recognizes the urgeiKy of its task, and it has made progress. But much 
remaitrs to be done if it is to avoid the widespread computer failures that urunodified 
systems could bring. If left imcorrected, the types of possible problems that could occur 
include but are not limited to late or inaccurate benefits payments, lack of patient 
scheduling for hospital treatments, and misinterpretation of patient data. The number of 
areas vulnerable to problems is vast. 

The Department's June 1997 Year 2000 plan ( VA Year 2000 Solutioral outlines VA's 
strategy, activities, and major milestones. According to this plan and in line with OMB 
guidance, VA's primary approach is to make its 11 existing mission-critical systems 
compliant; one, in fact, already is. Table 1 lists these systems, along with the numbers of 
applications they serve and the responsible VA component or office. 
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Table 1: VA s Mission-Critical Computer Systems fin and Their Appli cations <464^ 


Component/ Office 
(Number of Systems) 

Systems 

Number of 
Applications 

Veterans Benefits Administration 
(6) 

■ Compensation & Pension 

• Education 

■ Insurance 

• Loan Guaranty 

■ Vocational Rehabilitation 

■ Administrative 

157 

Veterans Health Administration 
(2) 

■ Veterans Health Information 
Systems and Technology 
Architecture 
• Veterans Health 

Administration Corporate 
Systems 

143 

160 

National Cemetery System (1)* 

• Burial Operations Support 
System/Automated 
Monument Application 
System— Reengineer 

2 

Office of Fitumcial Management 
(2) 

• Personnel and Accoimting 
Integrated Data 

■ Finandai Management System 

1 

1 


•The only system that VA considers to be fully Year 2000 compliant. 


Source; VA. 


Responsible for overseeing the Year 2000 problem at VA is its chief information officer 
(CIO); he is assisted by the CIOs of both VBA and VHA, by senior mformation 
teclmology managers in the National Cemetery System, and by staff offices at VA 
headquarters. VA has also designated a Year 2000 project manager, responsible for 
general oversight and monitoring. 
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According to VA's August 14, 1997, quarterly report to OMB, the Department has made 
progress in addressing the Year 2000 problem. As noted in the report, one of its 11 
mission-critical systems— the one serving the National Cemetery System-is already fully 
compliant. Of the ten remaining mission-critical systems and their applications, 85 
percent have been assessed and 51 percent have been renovated. In addition, VA has 
updated its total Year 2000 cost estimate from $144 million (May 1997) to $162 million; 
VA's stated reason for the increase is the need for upgrades to its commercial off-the- 
shelf software and hardware, and more contractual support. 

Ftuther, VA's current estimate shows that it expects systems assessment to be completed 
by the end of next January, renovation of systems by November 1998, validation by 
January 1999, and implementation by October 1999—2 months earlier than VA reported 
in May. 


VBA HAS BEGUN TO IMPLEMENT 
GAO RECOMMENDATIONS 

As we testified before the Subcommittee in June,'" correcting the Year 20(X) problem is 
critical to VBA's mission of providing benefits and services to veterans and their 
dependents. VBA has responded to this challenge by initiating a number of actions, 


‘“GAO/T-AIMD-97-114, June 26, 1997. 
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including developing an agencywide plan and a Year 2000 strategy, and creating a 
program management organization. However, several substantial risks remain. If VBA 
is to avert serious disruption to its ability to disseminate benefits, it will need to 
strengthen its nrumagement and oversight of Year 2000-related activities. 

Our May 30, 1997, report contained ten specific recommendations to the Secretary of 
Vetenms Affairs on actions that VBA needed to take to address the Year 2000 problem." 
VA concurs with all ten, and is in the process of implementing them. For example, 
according to VBA: 

■ To strengthen its Year 2000 program management office, it has assigned oversight 
and coordituition responsibilities for all Year 2000 activities to this office alone. 

■ It has completed inventories of data interfaces and third-party products 
(hardware, software, mainframes, minicomputers, operating systems, and utilities). 
VBA has also determined that most of its third-party products are Year 2000 
compliant— 98 percent of its personal computers, local area networks, 
mirucomputers, and conunercial software; and all of its imaging equipment and 
associated software. 

■ It has renovated half of the 157 applications that make up its six mission-critical 
systems. It plans to renovate the retiuiining applications by November 1998. 


"GAO/AIMD-97-79. 
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While we are encouraged by these positive actions, we understand from discussions 
with VBA officials that key work schedules have been compressed, creating added 
pressure. For example, renovation of VBA's largest and most critical applications-those 
necessary to the functioning of its Compeirsation and Pension Service-may not be 
completed by VBA’s target date of December 1998. Changes to these applications have 
had to be delayed in order to effect this year's legislatively mandated changes and cost- 
of-living increases. Time is sirtularly short for work on the loan guaranty system, for 
which all phases'^-including assessment-remain to be completed. For example, the new 
claims and verification application is scheduled to start in early fiscal year 1998, but it 
has a fail date’’ of E)ecember 1998. This leaves VBA only slightly over one year to 
design, develop, test, arrd implement this application. 

A further challenge for VBA is that it has not modified its schedule to take into account 
recent problems and delays in its attempts to replace an education payment system for 
selected reservists known as chapter 1606. Sudi schedules are important to ensuring 
that all mission-critical applications are fixed; they therefore need to be rttodified or 
updated to reflect realistic estimations of the difficulty of die work involved. 


'^The Year 2000 program phases are amarmess, assessment, renovation, validation, and 
implementation. 

’’The date on which this application will experierrce the effects of dates on calculations. 


9 



42 


In addition, although VBA has completed an inventory of 590 internal and extenuil 
interfaces, as of July 31, 1997, oidy 26 percent of the interfaces had been assessed for 
complumce. VBA's Year 2000 project manager indicated that VBA is eiKOuntering 
problems determiiung whether its external interfaces” are Year 2000 compliant because 
external sources have not provided the necessary iriformation. 

VBA also has not updated its January 1997 risk assessment to reflect the recent change in 
its Year 2000 strategy. Specifically, in response to concerns raised regarding its initial 
approach, VBA redirected its Year 2000 strategy by focusing on converting its existing 
benefits payment systems radter than replacing the noncompliant systems. Since risk 
assessment is an important prerequisite fdr effectively prioritizing projects and 
mitigating potential problems, updating the previous risk assessment to take this chai\ge 
into accotmt is essential. 

An internal VA oversight committee, established to monitor and evaluate the progress of 
VBA's Year 2000 activities, identified concerts similar to ours. %3ecifically, according to 
a member of this committee, little time remains for VBA to make the necessary 
modifications to its compensation and pension and loan guaranty systems, and much 
work remains in eissessing foe external interfaces for compliance. 

'''An example of an external interface is foe exchange of disability compensation 
information between foe Department of Defeise and VBA. Defense currently provides 
VBA with electronic information on the amount of disability benefits paid to a veteran 
by Defense for offset against foe amount paid by VBA to this same veteran. This offset 
is necessary because, by law, foe veteran cannot be paid twice for foe same disability. 
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VHA HAS BEGUN TO ASSESS ITS SYSTEMS 
AND RELATED PRODUCTS FOR COMPUANCE 

The Year 2000 challerrge for VHA is enormous. As the largest centrally directed civilian 
health care system in the United States, VHA manages health care delivery to veterans 
within 22 regional areas geographically dispersed throughout the country; these areas 
are known as Veterans Integrated Service Networks (VISNs), and they encompass 173 
VA medical centers, 376 outpatient clinics, 133 nursing homes, and 39 domiciliaries~a 
total of 721 facilities. These sites utilize a wide range of electroiuc information systems, 
biomedical equipment, facilities systems, and other computer-based system products. 
Accordingly, it is essential that each of these 22 regional health care networks thoroughly 
assesses and plans for ensuring Year 2000 compliance so that service delivery is not 
interrupted. 

Within VHA, the CIO has overall responsibility for planning and managing Year 2000 
compliance. The CIO created a VHA Year 2000 project office, empowered to develop 
compliance guidance. In April 1997 this office developed a VHA plan for addressing the 
year 2000; the plan was approved by VA's Under Secretary for Health on May 14 of this 
year. The CIOs of each of the 22 regional networks, medical facility directors, and 
managers have ultimate responsibility for preparing and executing their individual Year 
2000 plans, including all required assessment, renovation, validation/testing, and 
implementation activities. 
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According lo VA's August 14, 1997, quarterly report to OMB, VHA is in the initial stages 
of assessing the compliance of its two mission-critical systems— the Veterans Health 
Information Systems and Technology Architecture (VISTA)‘®-formerly known as the 
Decentralized Hospital Computer Program (DHCP)-and the VHA corporate systems. 

VA also reported that of the two systems' applications, 17 percent have been assessed 
and 16 percent rmrovated. VHA plans to complete this assessment and renovation by 
the end of January 1998 and July 1998, respectively. 

According to VA's Year 2000 readiness review, VHA's strategy for the luitiorud VISTA 
applications is to assess all 143 applications and recode as necessary. According to 
VHA, 34 of its 143 applications^ have been assessed; 33 of these 34 were eliminated as a 
result of the assessment. 

In order to effectively assess and renovate, it is necessary to understand how local 
facilities ate using the natiortal VISTA applications. One potential risk is that some local 
facilities have custorrtized natioruil applications, according to VA's Year 2000 readiness 


'^VISTA represents the tudotuil health care information applications along with related 
commercial products, personal computers/workstations, and other items used in VHA 
health cate facilities. 

“Examples of applications include dietetics, pharmacy/inpatient, health sumntary, 
prosthetics, and laboratory. 
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review.'^ If this is true, it is important that VHA know where applications have been 
changed-even in small ways— so as to ensure that they are Year 2000 compliant. Beyond 
customization, local facilities may purchase software add-ons to work with the national 
applications; here, too, these must be inventoried and Year 2000 compliance assessed. 

An inventory of internal and external VISTA interfaces has not yet been completed; 
systems developers plan to identify such interfaces when they assess each application. 
Should internal information be corrupted by exposure to uncorrected external interfaces 
through network exchanges, system crashes and/or loss of data could result. VA's Year 
2000 project trumager has expressed concern that this information may not be obtainable 
from external sources, who have yet to inform VHA whether their interfaces are Year 
2000 compliant. 

As with interfaces, VHA must be assured that the commercial software products it uses 
are Year 2000 compliant. It has completed an inventory of its commercial products, such 
as personal computer operating systems, office automation software, and medical 
applicalior\s; according to the project manager, over 3,000 software products and 1,000 
software vendors have been identified. VHA plans to rely on the General Services 
Administration to provide it with a general list of commercial products that are Year 


‘^Such customization includes special-purpose programs written by local information 
resources management staff or other system users on-site or imported from other VA 
medical centers. They generally meet a specific local need or extend the functionality of 
nationally released software. 
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2000 compliant. For specialized products unique to the health care industry, VHA plaits 
to contact manufacturers for compliance information. 

Hrysical facilities are another area of concern. According to VHA's Year 2000 program 
manager, VHA has not completed an inventory of facilities-related systems and 
equipment such as elevators; heating, ventilating, and air conditioning equipment; 
lighting systems; security systems; and disaster recovery systems. Such elements are 
vitally important to VHA's ability to provide high-quality health care services. VHA is 
working with the General Services Administration and manufacturers on this issue. 

Since it is often critical that medical services not be interrupted, VHA is required to have 
contingency plans in place in case hospital systems fail. These plans are reviewed and 
assessed regularly by the Joint Commission on Accreditation of Healthcare 
Organizations. However, such contingency plans are meant to ensure continued 
operation in die event of disaster; such approval does not necessarily ensure that all 
backup systems are Year 2000 compliant. 


VHA IS ASSESSING YEAR 2000 IMPACT MEDICAL DEVICES 

Health care facilities depend on the reliable operation of a variety of biomedical devices— 
equipment that can record, process, analyze, display, or transmit medical data. 

Examples include computerized nuclear magnetic resonance imaging (MRI) systenxs. 
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cardiac moiutoring systems, cardiac defibrillators, and various tools for laboratory 
analysis. Such devices may depend on a computer for caUbration or day-to-day 
operation. This computer could be either a personal computer that coimects to the 
device from a distance, or a microprocessor chip embedded within the device. In either 
case, the software that controls the operation of the computer may be susceptible to the 
Year 2000 problem. The impact could range from incorrect formatting of a printout to 
incorrect operation of the device, having the potential to affect patient care or safety. 

The risks for a specific medical device depend on the role of the device in the patient's 
care and the design of the device. Although medical treatment facilities have the 
expertise to understand how medical devices are used, they rely on device 
manufacturers to analyze designs and disclose Year 2000 compliance status. 

As a health care provider and user of medical devices, VHA is a key stakeholder in 
determining compliance of such tools. Another key player is the Food and Drug 
Administration (FDA), in its role of protecting the public from unsafe and/or ineffective 
medical devices. 

In attempting to ascertain the potential impact of the century change on its biomedical 
devices, VHA on two separate occasions sent letters to manufacturers. Its first letter was 
sent over a period of a few days begiiming June 23 of this year to equipment 
numufactuiers identified by selected experts within VHA. In the letter, VHA inquired as 
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to steps the manufacturer planned to take to resolve dte Year 2000 issue. Oit of 118 
letters, VHA received 32 responses. These responses were reviewed by VHA's medical 
device integrated product team, comprising internal experts from a variety of fields. 

On the basis of the team's analysis, VHA sent more detailed letters asking specific 
questions, including whether the manufacturer provided any devices to VA that 
incorporate a real-time clock; if such devices were provided, whether tfiey are Year 2000 
compliant; and for those that sue not compliant, asking for model numbers, device 
names, and the specific impact the century change would likely have on die device. 
These letters were sent to about 1,600 manufactiuers on September 9, 1997, with a 
request for responses by October 3. According to VHA, 50 responses had been received 
as of September 15. 

Product team members plan to review responses to ensure that they are categorized 
correctly as compliant, noncompliant, or pending; VHA will maintain a database of the 
manufacturers and their responses. This database will be made available to VA medical 
centers through die VHA intranet, although key personnel such as biomedical engineers 
may not have easy access to the intranet at some medical centers. The informadon will 
also be communicated to VA medical centers through monthly conference calls among 
engineers and communications with medical center directors. We feel that it is 
impierative that such results be widely disseminated; if the VHA intranet is insufficient 
for this task, other means should be found. 
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FDA also recently began communicating with manufacturers. According to officials, 

FDA sent a letter in early July of this year to about 13,000 such manufacturers, 
reminding them of their respotrsibility to ensure that their products will not be affected 
by the century change. In the letter FDA reminded manufacturers that, according to 
section 518 of the Federal Food, Drug, and Cosmetic Act, they are required to notify 
users or purchasers when FDA determines a device presents an unreasonable risk of 
substantial harm to public health. Although one response was received, the acting 
director of FDA’s Division of Electronics and Computer Science explained that it was not 
the agency’s intention to solicit a specific response because FDA expects manufacturers 
to report any problems found through normal reporting channels. FDA plans to 
disseminate information on any Year 2000 problems reported by manufacturers to the 
public through its reporting systems, such as the Medical Products Reporting Program 
("MedWatch"). 

According to the director of FDA's Cardiovascular Division, the agency’s strategy for 
helping to determine whether medical devices are Year 2000 compliant is to rely on the 
knowledge and experience of its resident experts. These experts, with backgrounds in 
electrical engineering, software engineering, and/or biomedical engineering, have 
reviewed the design of selected medical devices to determine whether the devices would 
be affected by the century change. In the case of pacemakers, for example, FDA experts 
have concluded that no adverse effect will result. This conclusion was based on the fact 
that the internal operations of pacemakers do not involve dates. The experts further said 
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that although pacemaker settings are often changed with the assistance of a computer, 
which often uses dates and may be noncompliant, a trained physician is always involved 
in controlling the settings. 

A federal entity-the Year 2000 Subgroup on Biomedical Equipment-is working to 
coordinate the effort to obtain Year 2000 compliance status information from medical 
device manufacturers. This group plans to follow up on nonrespondents to 
questionnaires sent out by VHA, FDA, and other federal health care providers to 
manufacturers requesting this information. 


In closing, Mr. Chairman, I want to stress that while our detailed review of the VHA 
area is just now underway, it is clear that for VA as a whole to have all of its mission- 
critical systems compliant by January 1, 2000 will entail a huge, well-coordiruited effort. 

This concludes my statement. I would be happy to respond to any questions that you or 
other Members of the Subcommittee may have at this time. 


(511236) 
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STATEMENT BY 

THE HONORABLE D. MARK CATLETT 
ACTING ASSISTANT SECRETARY FOR MANAGEMENT AND 
ACTING CHIEF INFORMATION OFFICER 
DEPARTMENT OF VETERANS AFFAIRS 

BEFORE THE 

SUBCOMMITTEE ON OVERSIGHT AND INVESTIGATIONS, 
COMMITTEE ON VETERANS’ AFFAIRS 
U.S. HOUSE OF REPRESENTATIVES 


September 25, 1997 


Introduction 

Mr. Chairman and Members of the Subcommittee, it is my pleasure to testify 
on behalf of the Department of Veterans Affairs (VA) on the status of our 
information systems for the Year 2000. I am accompanied today by the 
\’eterans Health Administration (VHA) Chief Information Officer, Mr. R. 
David Albinson, and the Veterans Benefits Administration (VBA) Chief 
Information Officer, Mr. Newell E. Quinton. 

We are committed to ensuring VA's information systems will provide 
uninterrupted service supporting the full range of veterans benefits delivery 
and medical care for the Year 2000 and beyond. 

I would like to bring the Subcommittee up-to-date on steps we are taking and 
our progress in resolving Year 2000 problems. As I have previously testified, 
we are following the standardized, governmentwide Year 2000 best practices 
phases (assessment, renovation, validation and implementation) established 
by the Office of Management and Budget (OMB) in copjunction with the 
Federal CIO Council Subcommittee on Year 2000. 

Year 2000 Accountability and Mont hly Reporti ng Requirements 

As VA's CIO, I am responsible for overseeing and ensuring the completion of 
the Year 2000 project for all VA systems. The VBA CIO, VHA CIO, and 
senior information technology managers in the National Cemetery System 
(NCS) are responsible for developing specific plans and managing the projects 
within their respective jurisdictions. 

I have established detailed monthly internal reporting requirements to track 
our progress in addressing Year 2000 problems. This monthly report, 
modeled after OMB's governmentwide Year 2000 quarterly report, measures 
the progress of each VA administration for each of the established phases. 
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In addition to this formal reporting mechanism, the Administration-level 
CIO’s and their Year 2000 program officials meet with me monthly to provide 
status reports addressing their successes and progress toward meeting the 
milestones presented in their plans. Monitoring monthly progress reports 
from each organization provides my office with early notice should an 
organization fall behind schedule. This early notice gives me the ability to 
recommend to VA's Chief Operating Officer, the Deputy Secretary, the 
necessary redirection and refocusing of appropriate resources to bring an 
organization back on schedule. 

Year 2000 Project Offices 

Both VBA and VHA have Year 2000 Project Offices that report directly to 
their organization's CIO. These Project Offices provide for the planning, 
guidance, oversight and technical support for their organization's Year 2000 
efforts. 

I would like to take this opportunity to provide the Subcommittee an update 
on \TlA's and VBA's Year 2000 accomplishments. 

Veterans Health Administration 

\'HA Plan 

\'HA has prepared and widely distributed a detailed compliance plan, 
organized in accordance with the General Accounting Office (GAO) draft Year 
2000 best practices. We provided a copy of the plan to the subcommittee in 
June. In the plan, key responsibilities and accountability were assigned to 
the VHA CIO and Associate CIOs, the Veterans Integrated Service Network 
(MSN) CIOs, and VHA healthcare facility management. Each of the 22 
MSN CIOs has the responsibility to develop and execute Year 2000 
compliance plans within their respective network. Many of the MSN CIOs 
have garnered management support, created Year 2000 workgroups, and 
identified key Year 2000 coordinators within their MSNs. The MSN CIOs 
have been provided guidance and reporting formats to generate consistent 
monthly statistics on both compliance status and Year 2000 costs. 

VHA Year 2000 Milestones and Status 

VHA's goal is to complete its assessment, including the nationwide 
assessment of biomedical equipment at VA medical facilities, by January 
1998. VHA's plan is to complete any necessary renovation by July 1998, 
validation by January 1999 and implementation by October 1999. As of 
August 31, 1997, 30 percent of VHA's mission-critical applications are 
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compliant. This percentage represents both the VISTA and VHA corporate 
system applications. 

VHA has assigned priorities to and scheduled the renovation of VHA mission- 
critical systems. VISTA information system applications have been 
categorized according to their criticality to VHA's mission. To support the 
detailed VISTA application assessment process, VHA has acquired and is 
using an automated tool to support code analysis for both the national 
software appUcations and for locally develc^d software applications. VHA 
has begun to use this tool on some of its larger, more complex applications; 
code that will require renovation appears to be limited. As of August 31, 

1997, 31 percent of VISTA applications have be assessed and 27 percent of 
VISTA applications are compliant or will be eliminated by the Year 2000. 

VHA is currently assessing all of its corporate information systems. System 
“owners” have been asked to determine the compliance status of their 
systems, and to establish schedules for completing the process if the systems 
are non-compliant. To date, 37 percent of the corporate systems have been 
assessed and 33 percent are either already compliant or will be eliminated by 
the Year 2000. 

\^HA has completed its inventory of commercial-off-the-shelf (COTS) products 
for each hospital and has begun to determine the comphance of these 
products. My office, in conjunction with VHA and VBA, will share 
information on COTS provider status with all VA offices and use the federal 
CIO Council Subcommittee on Year 2000 Web page being established and 
maintained by the General Services Administration (GSA) on COTS 
products. 

Biomedical Equipment 

As I testified in June, the potential Year 2000 impact on biomedical 
equipment is a national issue, affecting both the private sector and federal 
health care communities. VA, along with other agencies and the private 
health care community, is a consumer of biomedical equipment; we do not 
regulate the industry. Let me bring the Subcommittee up-to-date on the 
specffic actions VA is taking in the area of biomedical equipment. 

VHA formed the Medical Devices Integrated Product Team (MDIPT), a multi- 
disciplinary oversight committee, to assist with identifying, inventorying, 
assessing and evaluating medical devices at risk. The MDIPT membership 
includes the following: 
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Deputy Director of Nuclear Medicine at Ann Arbor, MI, 

Biomedical Engineer from VAMC Milwaukee, WI, 

Chief, Laboratory and Pathology Medicine at the Dallas VAMC, 
Cardiologist from the St. Louis VAMC, 

Director, Biomedical Engineering in HQ, and 
Chief of Surgery Service at the Salem VAMC. 

The team met in August to review and refine VHA's Year 2000 medical 
device plan. As a result, initial steps were validated and expanded; the 
model for assessing risk and for establishing priorities was validated and a 
comprehensive plan was produced. 

A subcommittee of the team created a database listing manufacturers of 
medical devices currently in use in the VHA. Experts fiom the team were 
consulted to ensure that manufacturers in all specialty areas were included. 

Members of the MDIPT rewrote the initial compliance status request letters 
using "lessons learned" fiom responses to the letters sent out in June 1997. 

A revised letter requesting more detailed information and plans from 
biomedical manufacturers was sent on September 10, 1997 to all 1,580 
manufacturers in the database. Vendors were asked to respond by October 3, 
1997; thus far, 135 responses have been received. VHA is reviewing those 
responses and will share the results with the Food and Drug Administration. 

Veterans Benefits Administration 

X'BA has made significant progress on its Year 2000 efforts in recent months. 
As of August 31, 1997, 52 percent of VBA's applications have been renovated 
and made Year 2000 compliant. Two payment applications. Chapter 31 
V ocational Rehabilitation), and the Reinstatement Program for Survivors 
(REPS) are compliant. Our Insurance application is on schedule with its 
renovation and will begin testing in February 1998. 

Overall Education system milestones are on track for completion within their 
projected timeframes and well before any application fail date. However, the 
projected completion date provided by our contractor shows a slippage for the 
Chapter 1606 redesign component of the Education system. This slippage 
has not jeopardized our overall completion date for making the Education 
system compliant. As for Loan Guaranty applications, task orders have been 
awarded or will be awarded to renovate noncompliant applications, insuring 
that all Loan Guaranty applications are compliant by their projected 
timeframes and before any fail date. VBA is developing a new application for 
real estate property management. The schedule has slipped but will not' 
impact the Year 2000 schedule because the existing application is compliant. 
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Let me address the Compensation and Pension application and its status. 
Forty-six percent of the Compensation and Pension modules are Year 2000 
compliant. However, Year 2000 work is competing with legislative program 
changes for Spina Bifida and incorporating Minimum Income for Widows, 
plus preparing for the annual cost of living adjustments. To minimize the 
risk that the complexities of implementing legislative changes would 
jeopardize Year 2000 efforts, awarded a contract for renovation support 
of our Compensation and Pension application. This contract provides an 
automated Year 2000 conversion tool for the application and additional 
contractor sl^>port. 

We testified in June that we awarded a task order for Oversight support. 

The Oversight Team completed their assessment of VBA’s Year 2000 effort. 
Their assessment substantiated what we knew all along; That VBA’s Year 
2000 effort is on track and that schedules and resources are reahstic. The 
Oversight team has made suggestions and recommendations that are being 
incorporated into VBA’s Year 2000 Project plan. 

VBA has recently increased the amotmt of contractor support for their project 
managers, and will award task orders to support their software quality and 
testing efforts, as well as some loan guaranty renovations within the next few 
months. VBA’s Oversight team will continue efforts to identify risk areas for 
VBA, including facility, telephone and non-information technology areas that 
could impact the delivery of benefits to our veterans. 

\^A has addressed all areas of potential Year 2000 problems. They have 
assessed all of their third party products and have budgeted for their 
replacements. ’They have acquired a compliant Honeywell 9000 platform for 
Year 2000 testing. As you know the Honeywell supports our Compensation, 
Pension, Education, and Vocational Rehabilitation applications. New, 
comfdiant IBM hardware and software is also being installed. In addition, 
VBA is working hard to resolve interface issues. Forty percent of their 
interfaces are Year 2000 compliant. 

VA's Austin Automation Center (AAC) 

The AAC provides VA-wide information technology support to all components 
within the Department. As of August 31, 1997, 79 percent of the applications 
they support have been renovated and are Year 2000 compUant. llie AAC 
plan is to have all systems renovated by September 1998, validated by 
October 1998, and fully implemented by September 1999. 
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VA working with Year 2000 Inter agency efforts 

VA, VBA and VHA repreaentativea are actively involved in aeveral 
interagency efforta to find common aolutiona to Year 2000 iaauea and are 
repreaenting VA'a intereat in aeveral aubgroupa of the Federal CIO Coiincil 
Subcommittee on Year 2000. Included are: 

• The biomedical equipment aubgrotq). Thia aubgroup ia chaired by the 
Department of Health and Htunan Services (HHS) and includes 
representatives fi^im FDA, Nuclear Regulatory Commission, National 
Institutes of Health, DoD and each of the uniformed services. 

• The telecommunications subgroup chaired by GSA to address issues in 
voice and data communications systems. 

• The subgroup on building systems chaired by GSA to address issues 
related to the operation of buildings and facilities. 

• The Year 2000 best practices subgroup chaired by the Social Security 
Administration to share approaches to resolving Year 2000 problems. 

• The state and local subgroup dealing with state and Federal Year 2000 
issues. 

In addition, VHA staff meets monthly with staff from the Office of the 
Assistant Secretary of Defense for Health Affairs to pursue the identification 
of Year 2000 issues and solutions common to both organizations. 

Summary 

VA organizations have prepared detailed systems inventories, and developed 
testing methodologies, individual project plans and contingencies. We are 
monitoring our progress for each application supporting our mission-critical 
systems. We are also monitoring such key elements as estimated lines-of- 
code, number of modules, operating systems and COTS packages. 

We will continue to work with the Federal CIO Council Subcommittee on the 
Year 2000 and continue sharing information among Federal agencies. We 
will continue to work with the HHS-chaired biomedical committee to resolve 
potential issues with biomedical equipment. 
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We are committed to ensuring that VA information systems will be ready for 
the coming millennium. VA information systems will continue to provide 
uninterrupted support to our programs and ensure that we deUver the 
highest quality benefits and medical care to our Nation's veterans and their 
families. 1 thank you for this opportunity to present our progress in 
preparing for the Year 2000. Mr. Albinson, Mr. Quinton and 1 would be 
happy to answer any questions you might have. 
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mmopncTioH 

Good Borning, Mr. ChairBan and Manbara of tba SubcoBBittaa. My 
naBa la Dr. Thosaa Sh<^. I aB tha Acting Diractor, Diviaion of 
EXactronica and co^utar Scianea, Offica of Sclanoa and 
TachnoXogy, Cantar for Oavicaa and RadiologicaX HaaXth (CDRH) , 
Food and Drug AdBiniatratlon (PDA) . Having praviouaXy taatifiad 
bafora thia SubcoBBittaa at tha Juna 26, 1997, haaring, I aB 
pXaaaad to ba hara today to provida inforaation on tha "Yaar 
2000" data iaaua aa it raXataa to BadicaX davicaa. AXthough PDA 
haa not racaivad any inforaation ainca tha pravioua haaring to 
indicata that thara viXX ba aignificant probXaaa with aadicaX 
davicaa, I aa hara to aaaiat tha SubcoBBittaa in ita afforta to 
axaalna tha iaaua. 

WHAT IS A MEDICAL DEVICE? 

According to tha dafinition in tha PadaraX Pood, Drug, and 
CoaBatic Act (FO&C Act) , a 'davica* ia: 

an inatruBant, apparatua, iapXaaant, aachina, contrivanca, 
inpXant, in vitro raagant, or othar aiBiXar or raXatad 
articXa, incXuding any coBponant, part or accaaaory, which 
ia intendad for uae in tha diagnoaia of diaaaaa or othar 
conditiona, or in tha cura, aitigation, traatnant, or 
prevention of diaaaae, in Ban or other aniBaXa, or intended 
to affect the atructure or any function of tha body and 
which doaa not achieve ita priaary intended purpoaaa through 
chaBicaX action and %rhi^ ia not dependent upon being 
BataboXisad for tha acbieveBant of ita priaary intended 
purpoaaa. 

Aa thia dafinition auggaata, aany different typaa of producta are 
properly regulated aa BadicaX davicaa. Medical davicaa include 
over 100,000 producta in Bora than 1,700 catagoriaa. Thaaa 
producta regulated by FDA aa aadical davicaa range froB alBpXa 
everyday articXea, auch aa tharBOBatara, tongue dapraaaora, and 
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h*ating pads, to tha aora eoaplax davicaa, auch as paeaaalcara, 
intrautarina davicaa, fatal atanta, and kidnay dialyaia aachinaa. 

FDA ia raaponaibla for protactiag public haalth by halping to 
anaura that aadieal davicaa ara aafa and affaotiva. FDA carriaa 
out ita aiaaion by avaluating naw products bafora thay ara 
aarketad; assuring quality control in aanufactura through 
inspection and anforcaaant activities; and monitoring adverse 
events in already marketed products, taking action, whan 
necessary, to prevent injury or death. A device manufacturer 
must comply with all the reguirementa of the PDfcC Act, including: 
establishment registration and device listing, premarket review, 
use of good manufacturing practices (OIPs) , reporting adverse 
events, and others. 

As diverse as medical devices are, so are the range and 
complexity of problems which can arise from their use. These 
problems include mechanical failure, faulty design, poor 
manufacturing quality, adverse effects of materials i^lanted in 
the body, improper maintenanee/specifications, user error, 
compromised sterility/shelf life, and electromagnetic 
interference among devices. 

Any computer software which meets the legal definition of a 
medical device is subject to applicable FDA medical device 
regulations. Medical devices %diieh use computers or software can 
take several forms including: embedded microchips which are part 
of, or components of, devices; non^embedded software used with, 
or to control, devices or record data from devices; or individual 
software programs which use or process patient data to reach a 
diagnosis, aid in therapy, or track donors and products. 

An issue which has been identified as warranting review is the 
impact of the 'Year 2000" on some medical device computer systems 
and software applications. These products could be impacted by 
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the "Yeer 2000" dete problem only if they use a date in their 
algoritha or calculations, or in record keeping; and a two^igit 
year forsat vas used in their design. Manufacturers of such 
products are the only reliable source of infomation as to the 
details of the Methods used in the prograssing and whether these 
two conditions are set. While we are in the process of reviewing 
this issue, we do not currently believe that there will be any 
major impact on medical device safety. 

B»b*dd«d Software 

Computer software frequently is embedded as a "co^^nent” of 
devices, i.e., software contained on a microchip to control 
device operation. Exai^iles of su^ devices are: pacemakers , 
infusion pui^s, ventilators, and many others. It is unlikely 
that most of these products would be i^>acted by the "Year 2000" 
problem. Almost none of these devices require knowledge of the 
current date to operate safely and effectively. For example, 
pacemakers do not use the current date in their operation. 

Won-gabedded softwara 

Non-embedded software is intended to be operated on a separate 
computer, often a personal coi^>uter or work station. Such 
software devices may be used to enhance the operation of another 
device or devices and, further, may use the two^igit year 
format. It is possible that non-embedded software devices may 
rely on the current date for proper operation and, further, may 
use the two-digit year format. Such products night be affected 
by the "Year 2000" date change. 

An example of non-embedded software is a computer program used to 
plan radiation therapy treatments delivered using radioactive 
isotopes as the radiation source (teletherapy or brachytherapy) . 
These treatments possibly could be affected if the computer 
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prograB usad to calculate the radiation doea parametere uses only 
a two^igit year representation. The calculation of the length 
of time since the source was last calibrated could be in error 
and thus lead to an incorrect treataent prescription. 

Other examples of non-enbedded software devices include: 
conversion of paceBaker telemetry data; conversion, transmission, 
or storage of medical images; off-line analysis of EGG data; 
digital analysis and graphical presentation of ECG data; 
calculation of rate response for a cardiac pacemaker; perfusion 
calculations for cardiopulmonary bypass; and calculation of bone 
fracture risk from bone densitometry data. While there is a 
chance that the two^igit format may affect the performance of 
these software devices, we believe that the 'Year 2000” risk will 
be mitigated through proactively working with manufacttirers. 

Letter to Medical Device Manufacturers 

In light of our review of the impact of the 'Year 2000” on some 
medical device computer systems and software applications, CDRH 
sent a letter in July to 13,407 medical device manufacturers, 

8322 domestic manufacturers and 5,085 foreign manufacturers, to 
ensure that manufacturers address this issue and review both 
embedded and non-embedded software products. We reminded 
manufacturers that, in addition to potentially affecting the 
functioning of some devices, the two-digit year format also could 
affect computer-controlled design, production, or quality control 
processes. We requested that the manufacturers review the 
software used to determine if there is any risk. 

CDRH recommended specific actions to ensure the continued safety 
and effectiveness of these devices. For eurrantiy manufactured 
medical devices, manufacturers should conduct hazard and safety 
analyses to determine %rhether device performance could be 
affected by the 'Year 2000” date change. If these analyses show 
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that davica safety or affactivanasa could be affactad« than 
appropriata staps should ba takan to corract currant production 
and to assist custonars irtio hava purchased such davicas. For 
coaputar-controllad design, production, and quality control 
proeaaaaa . nanufacturars should assure that ttro^diglt data 
foraats or CMq^utations do not causa problaas beginning 
January 1 , 2000. 

In our letter to industry, va rMindad manufacturers that under 
the GMP regulation and the current Quality System Regulation 
(which became affective June 1 and incorporates a sat of ehacics 
and balances in manufacturers* design processes to assure a safe, 
effective finished product), they must investigate and correct 
problems with medical devices. This includes devices which fail 
to operate according to their specifications because of 
inaccurate date recording and/or calculations. 

As a result of our letter, we expect manufacturers who identify 
products %rhich have a date^related problem which can pose a 
significant risk to the patient to take the necessary action to 
remedy the problem. This night include notification of device 
purchasers so that their device can be appropriately modified 
before the "Year 2000.** Manufacturers who discover a significant 
risk presented by a date problem are required to notify CDRH and 
take appropriate action. Again, we do not anticipate any 
significant problems with individual medical devices, however, we 
want to ensure the continued safety and effectiveness of these 
devices. 

For future medical device premarket submissions, manufacturers of 
devices irtiose safe operation could be affected by the "Year 2000** 
date change will be required to demonstrate that the products can 
perform date recording and coflg>utationB properly, i.e., "Year 
2000 " compliant. 
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Thank you, Mr. ChairMn, £or tha opportunity to tall you about 
the iaaue of "Yaar 2000" and madical davieaa. Lat aa asaura you 
we at FDA taka thia iaaua vary aarioualy aa wa do all problaaa 
which could affect the public health. Wa are conittad to a 
scientifically sound regulatory anvironaant which will provide 
Aaericans with the bast aadical care. In the public interest, 
FDA's coaaitaant to industry must be coupled with a reciprocal 
conaitaant: that aadical device firaa will aaat high standards in 
the design, aanufacture, and evaluation of their products. Wa 
recognise that this can only be attained through a collaborative 
effort — between PDA and industry — grounded in autual respect 
and responsibility. The protections afforded the Aaerican 
conauaer, and the benefits provided the aadical device industry, 
cannot be underest iaated. 



65 


POer-HKARI NO QUK8 T1<»18 
CONCEBNINa THE SEPTEMBEB 86, 1907 
HEABINa ON TEAR 8000 COUPUTEB COMPLIANCE 
IN THE DEPARTMENT OF VETERANS AFFAIRS 

FOR D. MARK CATLETT 

ACTTNQ ASSISTANT SBCRETABT FOR MANAQEHENT 
DEPARTMENT OF VETERANS AFFAIRS 

FROM THE HONORABLE LANE EVANS 
RANKINO DEMOCRATIC MEMBER 
COMMITTEE ON VETERANS' AFFAIRS 
UB. HOUSE OF BEraESENTATTVES 


Qn — tton 1; TTia overaicht team that VA oontnMSted with in Jana to 
atiMt the p r o g nm elite year 8000 eftorta eonelnded that *eevenl 
areaa of riak requiring BanageBantattWBtion were noted.* Canyon 
identify for the Sabooeualttae the epedlte riak areas in order of 
their laportanoeT Can yon alao detail the stepa yon trill be taking to 
addreaa theae potential tronbie apotsT 

Answan The SBA Intematianai (SRA) aiaeaament coochided that 
significant prograaa has been made in the Veterans Benefits Administration 
(VBA) efforts to make its ^iplieations ewnpHant, SRA did idsntafy several 
areas of risks rsqninng VBA management attention. 

SBA identified the renovation of the Compensatira and Pension (CAP) 
application as a risk because VBA recently awarded a contract fi>r support of 
Year 2000 renovations. 8RA found that the systems development st^ at the 
Hinas Benefits Ddivery Center, winch is responsible for the CAP system, has 
limited contract management experimtee and lacked detailed project plans. 
VBA has since provided contract management training to key personnel and 
a detailed plan is under developoumt by Hinee staff and will be comideted in 
early November. 

SRA also identified the two oontracts fix' raiovating two applications fix 
adnunistrative functions as risks because, they too, bad recently been 
awarded byVBA's systems development staff in Austin, Texas. VBA 
management in AuMin has oontractiiig management experience, however, 
the key iasnes will be the actual vendor ^ans and pesfixmanoe. Both 
vendors are beiiig doseiy monitored by the Anstin staff to ensnre they are 
performing as expected. 

Qnestiimfit Your testimony and the testimony of GAO Indicstee that 
the renovation of the VBA's Compe n sation and Penafam application 
ap p earstobeamalorhnrdla. Can yon describe in detail what the 
oversi^it team recommended in this regard, and ontHno what steps . 
yon wiU be taUng in the near term to address this critical proMemT 

Answen SBA recommended that the systems development staff at Hines 
obtain necessary coitraet management training and develop detailed project 
plans. The roiovation of the CAP application by the Hines staff represents a 
high risk because the known legislative and maintenance changee to the 
system diverted resources from Year 2000 work. 
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VBA has taken several steps to miticate this risk. VBA has awarded a 
contract to support Year 2000 renovation of the afstem. In addition. VBA 
has provided contract management training aird a detailed plan ia mider 
development hjr Hines staff to help eneure timely completion of the Year 2000 
renovation. Pending any major changes to the Hines workload, we are 
confident tfaia strategy will keep ua on sdredule. 

VBA has made significant progress renovating the CAP system in recent 
months and its Year 2000 efforts is on sdredule. As of Septemher 30, 1997, 
S2% of the CAP apfdication program modules are compKant 

Question Si It is our uaderstanrHng that oven those applications 
within the Veterans Benoits Aduiinistratton (VBA) that have been 
oomnletelv renovat ed are not nawessarilv oi»e>e tl«n«l. enH therwAw 
not year 9000 compliant U this uader stanHin g ccsrect and if so, 
what penentage of the renovated systems adthin VBA are fhlly 
operational at this potntT 

Applications that are renovated are Year 2000 compliant and operational. 
Th^ applications are properly processing dates firr the Year 2000 and 
beyond. 

Answen VBA is not counting sny application as completing the 
implementation phase, as defined bf the Office of Management and Budget 
(OHB), until it ia actually running on hardware using a co mplian t operating 
system. For esample, in the case of the Vocational RebaUhtation 
application, it has been renovated, validated ooH is in production. However, 
the fully oomphsnt operating system fi>r the mainfirame Honeywell system 
hardware will not be available for production until early in the second 
quarter of 1998. Presently, we report to 0MB that aiz percent of VBA’s 
applications have completed the implementatiim phase and are running 
using Year 2000 compliant operating systems. 7^ percentage complete fin- 
the implementation phase will grow substantially when the remaining 
compliant operating systems are installed. 

Question 4: The overai^t team indicated that the VA has yet to put 
together detailed eompllanoe plans for its Compensation and 
Pension system. Why are no such plans in place, and edien will such 
a plan bn put in place? 

Answer: Plans have always been in place for the compliance of the 
compensation and pension system. However, the oversight team pointed out 
that the "vi«ting plans did not have the qiedfidty necessary for an effort of 
this magnitude. Action ia being taken to revisit these plans and mesh them 
with the vendor's plan for renovation. VBA expects those plans to be 
completed by early November. 

Question S: Ihe ov«rsl|d>t tosun has pointed out oomplez 
management inoblems within the loan guaranty p rogram that have 
raised concern within the agency. Can yon briefly explain this 
problem and explain the VA's plans to address it? 

Answer: The oversi(d>t contractor pointed out that Loan Guaranty 
applications are run on several har^are platforms nuiking numagement of 
these systems ali^tly more complex. Multi-platfonn applications are not 
unusual today and VBA has an excellent management team with plans in 
place to manage the renovation of noncomidiant Loan Guaranty applications. 
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As «e testified in September, task erdns have been awarded to renovate 
nonc omp l i a n t Loan Guarani ap|dicati(ma, insuring that all Loan Guarani 
applications are compliant by their projected timeframes and befiire any frdl 
date. We also noted that VBA's schedule tar a new anidication fi>r real estate 
property management had slippad but would not impact the Year 2000 
sdiedule because the eaisting application is compliant 
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November 7, 1907 

The Honorable Lane Evana 
Banking Minority Member 
Committee on Veterans' Aflaira 
House of Repreaentallvea 

Subiecb VeteraiM Health Artmtnlraetlnn F«r4ltlv SniUemiv Sonw. Pmamm Msrie In 
EiMiirina Year 2000 CornnkMUH. hut B^nsln 

Dear Mr. Evans: 

This letter responds to your October 10, 1907, letter, which asked a question arising 
from our Septonber 26, 1997, teathnony on Year 2000 Initiatives at the Department 
of Veterans AflUn (VA).' Your question and our response foQow. 

Your testimony indioates that the Veterans Health Administration (VBA) has 
failed to confute an inventory of the elevator, heating, air conditioning, lighting 
systems, and disaster recovery systems at its ho^itals. How critical a problem 
is this, and is there still time to address this problem within the VHAf 

Ensuring Year 2000 compliance for bdUiy-ielated systems, such as those systems 
controlling elevator, beating, air conditioning; ventilation, and lighting as wdl as the 
disaster recoveiy or backiq) systems for these products, to a critical problem fbr 
both puUlc and private oigaidzations. Many todUtles built or renovated within the 
last 20 years contain embedded conqniter systems that controL monitor, or asaiat in 
operations. Many of these systems could malftmctlon due to vulnerability to the 
Year 2000 problem. For ezanple, on January 1, 2000: 

• Elevators could automatically park themselves on the llrst Doors, open their 
doors, and shut dowtt 

• Heating and air conditioning units could stop functioning properiy. 

• Card^tiy security systems could cease to operate. 

• Automatic lighting devices could tall to reactivate. 

Addressing the facility-related systems protdem to especially critical toe VHA, 
because it oversees 173 medical cadets, 376 outpatient cUnlcs, 133 nursing hcanes, 
and 39 domidltories-a total of 721 todHties. VHA tecogniies the criticality of 
ensuring Year 2000 com(9iance for such systems; its Year 2000 plan states that 
facility-related systan products are vitally Important to VHA in providing quality 
health-care service.' 

VHA has made some progress. Its Year 2000 protect otDce has begun to develc^ a 
centralized inventory for the facility-related Qtotans at its health-care facilities. It 
established s protect team, consisting of 20 technical experts in various facilities 
systems, to pull togetha a list of facility-related systems manufacturers to be used 
by VHA as the starting pcdnt for ttito Inventory. Hie team has drafted and plans to 


‘VetaraiMi AfIMni rnmmiter Systems: Artinn Underway Yet Much Work Bcmaina To 
Resolve Year 2000 Crisis (GA(yr-AIMD97-174, Sept 26, 1997). 
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send letters to these nunufSctuiers tsUiij If their products sre Yesr 2000 conqdlaiit 
and what their [dans are for addevtaig eompUsnce Ibr nonconpUant systems or 
products. Also, VHA's inedlcsl centers are currently devdoping an inventory and 
assessing their bdUty systems for Year 2000 compliance. Finally, VHA is also 
working with the CIO CouncO's nesdyfotined Year 2000 BuikHng Systems Subgroup 
on tsdUty-related systems Issues. 

VHA, however, texs some msfor challenges. 

• VHA has a v«y short dme ttsme to address the Yesr 2000 conqNidng problem; 
there are only 26 months remaining unto January 1, 2000. According to VHA's 
Year 2000 protect maiuger, VHA may not complete its sssfjmnents of fKdltty- 
related systems by January 31, 1998. 

• The protect maiuger Indicated that manufacturers nuy r>ot promptly reapoitd to 
VHA. He further Indicated that these manufacturers nuy i>ot know If their 
products are Yesr 2000 coespliant because some of the conqponents that nuke 
up the product may have bem built by others As a result, iiunufacturers wfll 
hm to contact the responsible suppliers to determliu whether the components 
sre Yesr 2000 compliant 

• According to its Year 2000 protect maiuger, VHA is largely dependent upon the 
numrfactnrers to detenaiiiu whether a Year 2000 problem esiats and how any 
Yesr 2000 problems will be cotiected. Once nunufacturer responses are 
recdved and verlfled, VHA must provide them to its Veteraiu bifomution 
Service Network s (VKN) and medical centers so that they can complete and 
implement their pim for Year 2000 compliance. 

• Finally, VHA must implement numiiactureis' lecommendatioiu for achieving 
Year 2000 compliance of laciltly systems and validate that all CsclIilyHnelated 
systems are Year 2000 compliant Also, in coordiiutlon with dhuster recovery 
plans already In effect at its medical centers, VHA nuiat devdop contlngHicy 
plam specifically deaiffied for Year 2000 faihiies and enrors. 


We discussed a draft of this report with VHA offlcials, and their conunents have 
been Incorporated where appropriate. VHA's Year 2000 project manager said that 
the report accurately reflected VHA's current sltuatloo fbr fadlityHrelated systems. 


bi aiuwering this question, we reviewed aiul aiulyzed agmicy documents leffeniiig 
to Year 2000 pio)ects-such as VHA's Year 2000 Flan and VHA's VISN Year 2000 
Flans-and intovlewed key VHA Year 2000 offldals. We conducted our work bom 
October 20 through November 6, 1997, in accordance with generally accepted 
government auditing standarda 


We are sending ctqdes of this report to the Chalniun of the Boose Committee on 
Veterans' Affairs, other interested committees, and the Acting Secretary of Veteraiu 
Affairs. Copies will also be made available to other parlies upon request If you 
have any questioiu concerning this report please contact me at (202) 61242S3 or 
Helen Lew, Assistant Director, at (202) 612.9366. You may also email us at 
wiUemtienj.aimd@gao.goiJ or lewh.aimd@gao.gov. 



Jod C. WUenusen 

Director, Infomution Resources Management 
(611238) 
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DEPABTMENT OF HIALTH It HUMAN SI>VK3S 


OeCSOMT 

Th« Bpnor«bX« Lmm Bvana 
I^Anklng Minority Noabor 
Co—itt— on Votorono* Affairs 
Houso of R^rsssntstivos 
Nsshington, O.C. 30515-4339 

DOST Nr. Evans: 

This is in rssponss to your lattsrs of Esptssbsr 19, ootobsr 10 
and Ootobsr 37, 1997 rsgarding follow-up inforaation to ths 
Juns 36 and Esptaabar 39, 1997 Eubooaaittss on Ovsrsi^ht and 
Xnvsstigations, Coaaittss on Vstsrans* Affairs, Roarings on 
Ysar 3000 (y3K) Zssuss and Tbsir Zapaot on ths Dspaxtasnt of 
Vstsrans* Affairs. This Isttsr is rssponsivs to ths thrss 
lattsrs rafsrsncsd abova as ths issuss in your lattsrs ars 
intsrrslatsd . 

IDBMTIFICATTQM AMD GOttMOTTOM 09 Var PSOaUMfl 

Lst US bsgin by assuring you that ths Food and Drug 
Adainiatration (PDA or ths Agsnoy), and particularly ths Csatsr 
for Daviess and Radiological Bsalth, taXss ths issus of 
possibls Y3K problsas in nodical dsvicss vary ssriously, and vs 
ars conaittsd to addrsssing sffsctivsly this aattsr. Ns 
alrsady havs addrssssd this issus with nodical dsvics 
nanufactursrs, as outlinsd in our tsstiaony, and vs will bs 
talcing additional stops, as sat forth in aors dstall bslow, to 
assurs ths continusd aafsty and sffsetivansns of nodical 
dsvicss. 

Prsaarkst rsvisv authority is ths principal prsvsntivs 
nschanisa FDA usss to kssp nodical dsvicss that ars unsafs or 
insffsetivs off ths aarkst* Onlsss saplieitly sxaaptsd by ths 
Agsncy, sines 1976 ovary nodical dsvicM aunt bs tha subject of 
a clsarsd prsaarkst notificuition subaission or an approved 
prsaarkst approval applicaticm. As vs havs tsstiflsd 
previously before ths SubcoaaittiM, for now nodical dsvicss, 

FOA now is rsvlsving subaissions to snsurs that ths products 
can psrfora dots recording and co^utations that will bs 
unaffsetsd by ths Y3X date change. 

in terns of products alrsady on ths aarkst, FDA assures ths 
safety and effectiveness of asdical devices aarkstsd and used 
in the United States priaarily through inspections of asdical 
device nanufacturing facilities and through aonitoring and 
seeking correction of identified problsas which have occurred 
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with alraady narkatad products. FDA inspacts nadical davlca 
firas to dataraln* cospllanca with th* Fadaral Food, Drug, and 
Cossatic (FDC) Act and FDA regulations, including th* Quality 
Systas Radiation (previously th* Good Manufacturing Practice 
(GNP) Regulation) (21 CFR 820) . Ondar th* Quality Systas 
Regulation (21 CFR 820.100(a)(1)), sadieal davic* nanufacturars 
must ensure and docusant that thair sadieal davicas parfors 
according to specifications and otharwisa cosply with GNPs. 

FDA baliavas its authority under th* Quality Systas Regulation 
to require (atP coiqilianca is our claarast avenue to ensure that 
sadieal davic* software and integrated cosponants ar* y2K 
coi^liant. This entails directing firss to chaok and verify 
whether thair products present any potential y2K probless and 
to bring potential probless that have bean identified to the 
attention of responsible parties at sanufacturing 
establishsants. We would, if necessary, taka regulatory action 
against firss that fall to cosply with the Quality Systas 
Regulation or other requiresents. 

He have alerted th* sadieal device Industry with th* July 1997 
letter of their <Allgation to identify and correct any probless 
with their prodticts. Moreover, in an effort to clarify this 
authority, the Agency plana to follow-up the letter with a 
Federal Register Notice that clearly directs sanufacturers to 
fulfill their obligations under 21 CFR 820. 100(a) (1) and that 
reiterates that it is the sanuf acturer ' s existing legal 
responsibility to identify, to investigate and, whan necessary, 
to correct the cause of product previews, including those 
related to Y2K issues. The Agency will suggest in this Notice 
a target schedule to cosplet* this review. 

Section S19(f) of the FDC Act, idilch was added by the Safe 
Medical Device Act of 1990, requires sanufacturers to report 
certain corrections and resovals of sadieal devices undertaken 
by sanufacturers. Accordingly, idien sanufacturers conduct 
their Y2K checks under th* 9fP Regulation, if probless ar* 
found and corrections sade ”to reduce a risk to health posed by 
the device, or to resedy a violation of this Act caused by th* 
device tdiich say present a risk to health," these corrections 
would be reportable to FDA under Section 519(f) of th* FDC Act. 
This is a new provision whose regulations will beem* effective 
upon cospletion of the adsinistratlve review procedures under 
th* Paperwork Reduction Act of 1995. Th* Fadaral Register 
Notice will underscore that any such potential Y2K probless 
sust be identified, corrected and reported to th* Agency. 
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LIST OP ig nTraT. nn/TruB 

Bassd on its sciantillc assasssant of tha Y2K issua, FDA 
bal lavas that thera ara vary faw Mdleal davicaa dapandant on 
calculations which usa data Inforaatlon for propar functioning. 
Thara ara sosa ganarlc typas of davicas which say ralsa Y3K 
cosplianca Issuaa, but FDA doas not hava a list of sadlcal 
davicas idilch hava baan detamlnad to ba Y2K ooaqpllant or 
non-c(mpllant by Industry sourcas. 

Tha only sadlcal davica currantly known to FDA to hava a Y2K 
problas which could IspAct patlant safaty Is ona vandor's 
radiation traataant planning systaa. That vandor currantly Is 
davaloping a solution for the problaa which will ba aada 
avallabla to purchasars. 

In your lattar you state that, "one of the aost serious 
challenges to be addressed Involves tha y2K coapllance of 
aachlnery, such as aedlcal devices, which uses aabaddad chips." 
Our anginaering analysis indicates that to create a problaa tha 
aabaddad chip also aust incorporate the use of a date, and that 
date aust have been represented using a two digit foraat for 
the year. It Is laportant to note that this qualification 
greatly raduces the universe of affected products. Thera ara 
few aedlcal devices In which the usa of a date is critical for 
the device function. 

A systea which deteralnes a patient's age for use in an 
algorltha froa inforaatlon entered detailing tha patient’s 
birthday and the current date aay hava Y2K cosplianca issues. 
There are several categories of this type of device, such as 
electrocardiogram interpretation progreuis or devices which 
provide diagnostic information based on various parameters, 
including the age of the patient, which ara provided as input 
to tha device. Other systems with a potential for data-relatod 
problems are auxiliary or accessory equipment usad with 
pacamakers to display or adjust device function, but for which 
the critical functioning of the device (the pacing function) is 
not date -dependent, and central nursing stations recording data 
from multiple patients or computer-run systems tracking certain 
items in an operating room. At this time, FDA has no 
information which documents non-coipl lance or problems with any 
of these types of devices. 

COHSHLTATIOH WITH TH E VETERAMS ' HEALTH AnUTMTSTRATIOW 

Should the veterans' Health Administration (VHA) request 
specific consultation or assistance froa FDA, we will provide 
whatever assistance that can be made available. VHA and FDA, 
along with representatives of other Federal agencies. 
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participate on the Chief Information Officers Council 
Subconittee on the Year 2000 working group on medical devicee 
and acientific equipaant. This working group meets regularly 
to address issues such as you have raised in your letters. 

One action under consideration is the creation of an Internet 
website early in 1998 for disseminating Y2X information on 
medical devices provided voluntarily or through required 
reports by manufacturers. The website could be designed to 
provide public access to the yax cnpllance status of medical 
devices and scientific equipment voluntarily provided by 
manufacturers. This information would be available to the 
Department of Veterans* Affairs, as well as to other Federal 
and public health care facilities. 

We will continue to work with the public, industry, and other 
Interested public health agencies to ensure that any potential 
Y2X problems affecting medical devices are Identified and 
corrected. We hope this information is helpful. If we may be 
of any further assistance, please let us know; 

Sincerely, 



Associate Commissioner 


for Legislative Affairs 


cc: The Honoredile Bob Stump 

Chairman, Committee on Veterans' Affairs 
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